CVE-2022-41274
Assigner: sap
Published: 2022-12-13T03:11:53.200Z
State: PUBLISHED
affected: defaultStatus: unaffected
product: Disclosure Management
vendor: SAP
versions: status: affected
version: 10.1
descriptions: supportingMedia: base64: no
type: text/html
value: SAP Disclosure Management - version 10.1, allows an authenticated attacker to exploit certain misconfigured application endpoints to read sensitive data. These endpoints are normally exposed over the network and successful exploitation can lead to the exposure of data like financial reports.
value: SAP Disclosure Management - version 10.1, allows an authenticated attacker to exploit certain misconfigured application endpoints to read sensitive data. These endpoints are normally exposed over the network and successful exploitation can lead to the exposure of data like financial reports.
metrics: cvssV3_1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 6.5
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: NONE
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
version: 3.1
format: CVSS
scenarios: value: GENERAL
problemTypes: descriptions: cweId: CWE-863
description: CWE-863 Incorrect Authorization
type: CWE
source: discovery: UNKNOWN
x_generator: engine: Vulnogram 0.1.0-dev