PT-2024-31536 · Sap · Sap Netweaver As Java

Published 2024-09-09 · Updated 2024-09-10 · CVE-2024-45283

Positive Technologies (AI Summary)

CVSS v3.1

6.0

Medium

Base vector

AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions SAP NetWeaver AS for Java (affected versions not specified)

Description The issue allows an authorized attacker to obtain sensitive information. The attacker could obtain the username and password when creating an RFC destination. After successful exploitation, an attacker can read the sensitive information but cannot modify or delete the data.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-256

Related Identifiers

BDU:2025-12960

CVE-2024-45283

Affected Products

Sap Netweaver As Java

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2024-45283 · Security Note
• https://bdu.fstec.ru/vul/2025-12960 · Security Note
• https://support.sap.com/en/my-support/knowledge-base/security-notes-news/bulletin-2024.html · Note
• https://twitter.com/VulmonFeeds/status/1833480672364618130 · Twitter Post
• https://t.me/cvedetector/5163 · Telegram Post
• https://url.sap/sapsecuritypatchday · Note
• https://twitter.com/CVEnew/status/1833373808155365801 · Twitter Post
• https://me.sap.com/notes/3477359 · Note