CVE-2024-47577: Cleartext Transmission of Sensitive Information

Webservice API endpoints for Assisted Service Module within SAP Commerce Cloud has information disclosure vulnerability. When an authorized agent searches for customer to manage their accounts, the request url includes customer data and it is recorded in server logs. If an attacker impersonating ...

PT-2024-9334

Name of the Vulnerable Software and Affected Versions: SAP Commerce Cloud affected versions not specified Description: The issue is related to an information disclosure vulnerability in the Webservice API endpoints for the Assisted Service Module within SAP Commerce Cloud. When an authorized agen...