Design/Logic Flaw

2024-01-0902:15:00

PRIOn knowledge base

www.prio-n.com

sap web dispatcher

icm

unauthorized access

high confidentiality risk

kernel 7.22

kernel 7.53

kernel 7.54

6.8 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

37.3%

JSON

Under certain conditions, Internet Communication Manager (ICM) or SAP Web Dispatcher - versions KERNEL 7.22, KERNEL 7.53, KERNEL 7.54, KRNL64UC 7.22, KRNL64UC 7.22EXT, KRNL64UC 7.53, KRNL64NUC 7.22, KRNL64NUC 7.22_EXT, WEBDISP 7.22_EXT, WEBDISP 7.53, WEBDISP 7.54, could allow an attacker to access information which would otherwise be restricted causing high impact on confidentiality.

CPENameOperatorVersion
netweavereqkrnl64nuc-7.22
netweavereqkernel-7.22
netweavereqkrnl64uc-7.22ext
netweavereqkrnl64uc-7.53
netweavereqkrnl64nuc-7.22ext
netweavereqwebdisp-7.22ext
netweavereqwebdisp-7.53
netweavereqwebdisp-7.54
netweavereqkernel-7.53
netweavereqkernel-7.54

Name	Operator	Version
netweaver	eq	krnl64nuc-7.22
netweaver	eq	kernel-7.22
netweaver	eq	krnl64uc-7.22ext
netweaver	eq	krnl64uc-7.53
netweaver	eq	krnl64nuc-7.22ext
netweaver	eq	webdisp-7.22ext
netweaver	eq	webdisp-7.53
netweaver	eq	webdisp-7.54
netweaver	eq	kernel-7.53
netweaver	eq	kernel-7.54