CVE-2024-47577 Information Disclosure vulnerability in SAP Commerce Cloud

Webservice API endpoints for Assisted Service Module within SAP Commerce Cloud has information disclosure vulnerability. When an authorized agent searches for customer to manage their accounts, the request url includes customer data and it is recorded in server logs. If an attacker impersonating ...

SAP Commerce Cloud 安全漏洞

SAP Commerce Cloud is a cloud-based e-commerce platform from SAP, Germany. It supports sales management, marketing management, order management, and operations management. A security vulnerability exists in SAP Commerce Cloud, which stems from an information disclosure vulnerability in the...

PT-2024-9334

Name of the Vulnerable Software and Affected Versions: SAP Commerce Cloud affected versions not specified Description: The issue is related to an information disclosure vulnerability in the Webservice API endpoints for the Assisted Service Module within SAP Commerce Cloud. When an authorized agen...

CVE-2024-47577: Cleartext Transmission of Sensitive Information

Webservice API endpoints for Assisted Service Module within SAP Commerce Cloud has information disclosure vulnerability. When an authorized agent searches for customer to manage their accounts, the request url includes customer data and it is recorded in server logs. If an attacker impersonating ...