In SAP NetWeaver Java (Software Update Manager 1.1), under certain conditions when a software upgrade encounters errors, credentials are written in plaintext to a log file. An attacker with local access to the server, authenticated as a non-administrative user, can acquire the credentials from the logs. This leads to a high impact on confidentiality, with no impact on integrity or availability.
References
Configurations
No configuration.
History
12 Nov 2024, 13:55
Type | Values Removed | Values Added |
---|---|---|
Summary |
|
12 Nov 2024, 01:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2024-11-12 01:15
Updated : 2024-11-12 13:55
NVD link : CVE-2024-47588
Mitre link : CVE-2024-47588
CVE.ORG link : CVE-2024-47588
JSON object : View
Products Affected
No product.
CWE
CWE-522
Insufficiently Protected Credentials