SAPControl GetEnvironment - Disclosure Detection

Detected SAP systems where the SAP Start Service sapstartsrv SAPControl SOAP web service exposes the GetEnvironment web method without authentication. !/usr/bin/env python3 -- coding: utf-8 -- """Detected SAP systems where the SAP Start Service sapstartsrv SAPControl SOAP web service exposes the...

CVE-2024-52313

An authenticated data.all user is able to manipulate a getDataset query to fetch additional information regarding the parent Environment resource that the user otherwise would not able to fetch by directly querying the object via getEnvironment in data.all...

CVE-2024-52313: Authorization Bypass Through User-Controlled Key

An authenticated data.all user is able to manipulate a getDataset query to fetch additional information regarding the parent Environment resource that the user otherwise would not able to fetch by directly querying the object via getEnvironment in data.all...

PT-2024-35173

Name of the Vulnerable Software and Affected Versions Amazon data.all versions =2.6.0 Description An authenticated data.all user can manipulate a getDataset query to fetch additional information regarding the parent Environment resource that the user otherwise would not be able to fetch by direct...