Lucene search
SapCVELIST:CVE-2024-39593HistoryJul 09, 2024 - 3:51 a.m.
CVE-2024-39593 [CVE-2024-39593] Information Disclosure vulnerability in SAP Landscape Management
2024-07-0903:51:46
CWE-200
sap
www.cve.org
3
sap landscape management
information disclosure
cve-2024-39593
CVSS3
6.9
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:L/A:N
EPSS
0.001
Percentile
18.8%
SAP Landscape Management allows an authenticated
user to read confidential data disclosed by the REST Provider Definition
response. Successful exploitation can cause high impact on confidentiality of
the managed entities.
CNA Affected
[
{
"defaultStatus": "unaffected",
"product": "SAP Landscape Management",
"vendor": "SAP_SE",
"versions": [
{
"status": "affected",
"version": "VCM 3.00"
}
]
}
]Related
cve
cve
CVE-2024-39593
2024-07-09 04:15:13
vulnrichment
vulnrichment
nvd
nvd
CVE-2024-39593
2024-07-09 04:15:13
CVSS3
6.9
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:L/A:N
EPSS
0.001
Percentile
18.8%
Related for CVELIST:CVE-2024-39593