Lucene search
PRIOn knowledge basePRION:CVE-2023-24526HistoryMar 14, 2023 - 5:15 a.m.
Authentication flaw
2023-03-1405:15:00
PRIOn knowledge base
www.prio-n.com
7
sap
netweaver
app server
java
authentication
flaw
low impact
confidentiality
SAP NetWeaver Application Server Java for Classload Service - version 7.50, does not perform any authentication checks for functionalities that require user identity, resulting in escalation of privileges. This failure has a low impact on confidentiality of the data such that an unassigned user can read non-sensitive server data.
| CPE | Name | Operator | Version |
|---|---|---|---|
| netweaver_application_server_java | eq | 7.50 |
Related
cnvd
cnvd
SAP NetWeaver AS Java Access Control Error Vulnerability
2023-03-16 00:00:00
cve
cve
CVE-2023-24526
2023-03-14 05:15:29
nvd
nvd
CVE-2023-24526
2023-03-14 05:15:29
cvelist
cvelist
nessus
nessus
SAP NetWeaver AS Java Multiple Vulnerabilities (March 2023)
2023-03-16 00:00:00