CVE-2024-39593

SAP Landscape Management allows an authenticated user to read confidential data disclosed by the REST Provider Definition response. Successful exploitation can cause high impact on confidentiality of the managed entities.
References
Link Resource
https://me.sap.com/notes/3466801 Permissions Required
https://url.sap/sapsecuritypatchday Vendor Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:sap:landscape_management:3.0:*:*:*:*:*:*:*

History

29 Aug 2024, 19:08

Type Values Removed Values Added
First Time Sap landscape Management
Sap
CVSS v2 : unknown
v3 : 6.9
v2 : unknown
v3 : 5.7
References () https://me.sap.com/notes/3466801 - () https://me.sap.com/notes/3466801 - Permissions Required
References () https://url.sap/sapsecuritypatchday - () https://url.sap/sapsecuritypatchday - Vendor Advisory
CPE cpe:2.3:a:sap:landscape_management:3.0:*:*:*:*:*:*:*
CWE NVD-CWE-noinfo

09 Jul 2024, 18:19

Type Values Removed Values Added
Summary
  • (es) SAP Landscape Management permite a un usuario autenticado leer datos confidenciales revelados por la respuesta de Provider Definition REST. La explotación exitosa puede causar un gran impacto en la confidencialidad de las entidades gestionadas.

09 Jul 2024, 04:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-07-09 04:15

Updated : 2024-08-29 19:08


NVD link : CVE-2024-39593

Mitre link : CVE-2024-39593

CVE.ORG link : CVE-2024-39593


JSON object : View

Products Affected

sap

  • landscape_management
CWE
NVD-CWE-noinfo CWE-200

Exposure of Sensitive Information to an Unauthorized Actor