Authentication flaw

2023-12-1202:15:00

PRIOn knowledge base

www.prio-n.com

sap

gui

windows

java

authentication

flaw

unauthorized access

data manipulation

as abap

6.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

42.1%

JSON

SAP GUI for Windows and SAP GUI for Java allow an unauthenticated attacker to access information which would otherwise be restricted and confidential. In addition, this vulnerability allows the unauthenticated attacker to write data to a database table. By doing so the attacker could increase response times of the AS ABAP, leading to mild impact on availability.

CPENameOperatorVersion
netweaver_application_server_abapeq700
netweaver_application_server_abapeq731
netweaver_application_server_abapeq740
netweaver_application_server_abapeq750

Name	Operator	Version
netweaver_application_server_abap	eq	700
netweaver_application_server_abap	eq	731
netweaver_application_server_abap	eq	740
netweaver_application_server_abap	eq	750