Lucene search
HistoryOct 10, 2023 - 2:15 a.m.
CVE-2023-42475
cve-2023-42475
low privileged attacker
server files
4.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
4.4 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
14.0%
The Statutory Reporting application has a vulnerable file storage location, potentially enabling low privileged attacker to read server files with minimal impact on confidentiality.
Affected configurations
Node
saps\/4hanaMatch102
ORsaps\/4hanaMatch103
ORsaps\/4hanaMatch104
ORsaps\/4hanaMatch105
ORsaps\/4hanaMatch106
ORsaps\/4hanaMatch128
Related
prion
prion
Code injection
2023-10-10 02:15:00
cve
cve
CVE-2023-42475
2023-10-10 02:15:11
cvelist
cvelist
CVE-2023-42475 Information Disclosure Vulnerability in Statutory Reporting
2023-10-10 01:37:36
4.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
4.4 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
14.0%
Related for NVD:CVE-2023-42475