PT-2023-28366 · Sap · Sap Commerce Cloud

Published 2023-12-11 · Updated 2024-09-28 · CVE-2023-42481

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions SAP Commerce Cloud versions HY COM 1905 through HY COM 2205, COM CLOUD 2211

Description A locked B2B user can misuse the forgotten password functionality to un-block their user account again and re-gain access if SAP Commerce Cloud - Composable Storefront is used as storefront, due to weak access controls in place. This leads to a considerable impact on confidentiality and integrity.

Recommendations For SAP Commerce Cloud versions HY COM 1905 through HY COM 2205, COM CLOUD 2211, consider disabling the forgotten password functionality for locked B2B users until a patch is available. Restrict access to the Composable Storefront for locked B2B users to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-640

Related Identifiers

CVE-2023-42481

Affected Products

Sap Commerce Cloud

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2023-42481 · Security Note
• https://osv.dev/vulnerability/CVE-2023-42481 · Vendor Advisory
• https://sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html · Vendor Advisory
• https://t.me/cvenotify/96489 · Telegram Post
• https://twitter.com/CVEnew/status/1734394501777764556 · Twitter Post
• https://t.me/cvenotify/63607 · Telegram Post
• https://me.sap.com/notes/3394567 · Note
• https://twitter.com/VulmonFeeds/status/1734466017382834520 · Twitter Post