Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-36924
HistoryJul 11, 2023 - 3:15 a.m.

Design/Logic Flaw

2023-07-1103:15:00
PRIOn knowledge base
www.prio-n.com
3
sap erp
defense forces
public security
specific function
admin privileges
arbitrary data
syslog
compromise
application integrity

5.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

27.6%

While using a specific function, SAP ERP Defense Forces and Public Security - versions 600, 603, 604, 605, 616, 617, 618, 802, 803, 804, 805, 806, 807, allows an authenticated attacker with admin privileges to write arbitrary data to the syslog file. On successful exploitation, an attacker could modify all the syslog data causing a complete compromise of integrity of the application.

5.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

27.6%

Related for PRION:CVE-2023-36924