PT-2023-31268 · Sap · Sap Solution Manager

Published 2023-12-11 · Updated 2023-12-14 · CVE-2023-49587

Positive Technologies (AI Summary)

CVSS v3.1

6.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions SAP Solution Manager version 720

Description The issue allows an authorized attacker to execute certain deprecated function modules, which can read or modify data of the same or other components without user interaction over the network.

Recommendations For SAP Solution Manager version 720, consider restricting access to deprecated function modules to minimize the risk of exploitation. As a temporary workaround, disabling the execution of these deprecated function modules can help until a more permanent solution is available.

Fix

Command Injection

Weakness Enumeration

CWE-77

Related Identifiers

CVE-2023-49587

Affected Products

Sap Solution Manager

References · 6

• https://sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-49587 · Security Note
• https://osv.dev/vulnerability/CVE-2023-49587 · Vendor Advisory
• https://twitter.com/CVEnew/status/1734394493095604559 · Twitter Post
• https://me.sap.com/notes/3395306 · Note
• https://twitter.com/VulmonFeeds/status/1734462728205402601 · Twitter Post