CVE-2023-35872

The Message Display Tool MDT of SAP NetWeaver Process Integration - version SAPXIAF 7.50, does not perform authentication checks for certain functionalities that require user identity. An unauthenticated user might access technical data about the product status and its configuration. The...

CVE-2023-35872

CVE-2023-35872 affects SAP NetWeaver Process Integration (MDT component) with version SAP_XIAF 7.50. The issue is a missing authentication check for certain MDT functionalities that require user identity, potentially allowing an unauthenticated user to access technical data about product status a...

CVE-2023-35872 Missing Authentication check in SAP NetWeaver Process Integration (Message Display Tool)

The Message Display Tool MDT of SAP NetWeaver Process Integration - version SAPXIAF 7.50, does not perform authentication checks for certain functionalities that require user identity. An unauthenticated user might access technical data about the product status and its configuration. The...