PT-2024-7447 · Sap · Sap Landscape Management

Published 2024-06-26 · Updated 2024-08-29 · CVE-2024-39593

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:S/C:C/I:P/A:N

Name of the Vulnerable Software and Affected Versions: SAP Landscape Management (affected versions not specified)

Description: The issue is related to the REST Provider Definition response in SAP Landscape Management, which allows an authenticated user to read confidential data. This can cause a high impact on the confidentiality of the managed entities. The vulnerability is associated with insufficient protection of service data, potentially allowing a remote attacker to gain unauthorized access to protected information.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

BDU:2024-08826

CVE-2024-39593

Affected Products

Sap Landscape Management

References · 13

• https://url.sap/sapsecuritypatchday · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-39593 · Security Note
• https://bdu.fstec.ru/vul/2024-08826 · Security Note
• https://osv.dev/vulnerability/CVE-2024-39593 · Vendor Advisory
• https://support.sap.com/en/my-support/knowledge-base/security-notes-news.html?anchorId=section_370125364 · Note
• https://t.me/cvenotify/92723 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1810549745464578457 · Twitter Post
• https://twitter.com/CVEnew/status/1810528574388277299 · Twitter Post
• https://t.me/cvedetector/230 · Telegram Post
• https://support.sap.com/en/my-support/knowledge-base/security-notes-news/august-2024.html · Note
• https://t.me/cvenotify/85450 · Telegram Post
• https://me.sap.com/notes/3466801 · Note
• https://vuldb.com/?id.270560 · Note