CVE-2023-39439 (published 2023-08-08T00:49:01.594Z)
SAP Commerce Cloud may accept an empty passphrase for user ID and passphrase authentication, allowing users to log into the system without a passphrase.


Affected products: Vendor: SAP_SE
Product: SAP Commerce
Versions: HY_COM 2105, HY_COM 2205, COM_CLOUD 2211