PT-2022-4103 · Sap · Sap Enable Now

Published 2022-08-09 · Updated 2022-08-15 · CVE-2022-35293

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions SAP Enable Now (affected versions not specified)

Description The issue is related to insecure session management and authorization procedure weaknesses. An unauthenticated attacker can exploit this to gain access to a user's account, potentially viewing or modifying user data. This could have limited impact on the confidentiality and integrity of the application. The vulnerability may allow a remote attacker to gain unauthorized access to protected information and compromise its integrity.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

BDU:2022-04939

CVE-2022-35293

Affected Products

Sap Enable Now

References · 5

• https://sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-35293 · Security Note
• https://osv.dev/vulnerability/CVE-2022-35293 · Vendor Advisory
• https://launchpad.support.sap.com/#/notes/3210566 · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-04939 · Security Note