SAP ERP Defense Forces and Public Security security bypass | CVE-2023-36924
NAME
__________
SAP ERP Defense Forces and Public Security security bypass
Platforms Affected:
SAP ERP Defense Forces and Public Security 600
SAP ERP Defense Forces and Public Security 603
SAP ERP Defense Forces and Public Security 604
SAP ERP Defense Forces and Public Security 605
SAP ERP Defense Forces and Public Security 616
SAP ERP Defense Forces and Public Security 617
SAP ERP Defense Forces and Public Security 618
SAP ERP Defense Forces and Public Security 802
SAP ERP Defense Forces and Public Security 803
SAP ERP Defense Forces and Public Security 804
SAP ERP Defense Forces and Public Security 805
SAP ERP Defense Forces and Public Security 806
SAP ERP Defense Forces and Public Security 807
Risk Level:
6.5
Exploitability:
Unproven
Consequences:
Bypass Security
DESCRIPTION
__________
SAP ERP Defense Forces and Public Security could allow a remote authenticated attacker to bypass security restrictions, caused by a log injection flaw. By sending a specially crafted request, an attacker could exploit this vulnerability to modify all the syslog data.
CVSS 3.0 Information
__________
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged
Access Vector:
Network
A considerable amount of time and effort goes into maintaining this website, creating backend automation and creating new features and content for you to make actionable intelligence decisions. Everyone that supports the site helps enable new functionality.
If you like the site, please support us on “Patreon” or “Buy Me A Coffee” using the buttons below
To keep up to date follow us on the below channels.
