PT-2024-21062 · Sap · Sap Netweaver Wsrm

Published 2024-03-11 · Updated 2025-04-10 · CVE-2024-25644

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions SAP NetWeaver WSRM version 7.50

Description Under certain conditions, SAP NetWeaver WSRM allows an attacker to access information that would otherwise be restricted, causing low impact on Confidentiality with no impact on Integrity and Availability of the application.

Recommendations For SAP NetWeaver WSRM version 7.50, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Incorrect Permission

Weakness Enumeration

CWE-732

Related Identifiers

CVE-2024-25644

Affected Products

Sap Netweaver Wsrm

References · 7

• https://support.sap.com/en/my-support/knowledge-base/security-notes-news.html?anchorId=section_370125364 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-25644 · Security Note
• https://osv.dev/vulnerability/CVE-2024-25644 · Vendor Advisory
• https://t.me/cvenotify/118742 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1767422883645501590 · Twitter Post
• https://t.me/cvenotify/73518 · Telegram Post
• https://me.sap.com/notes/3425682 · Note