CVE-2022-1248

ALTO 7.3CVE-2022-1248 · Published 06/04/2022 · updated 17/06/2026

In breve

CVE-2022-1248 è una vulnerabilità ALTO (CVSS 7.3) che riguarda sap information system (sap information system project).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.4%, superiore al 71.7% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
sap information system sap_information_system_project	`= 1.0`	No fix yet

Description

A vulnerability was found in SAP Information System 1.0 which has been rated as critical. Affected by this issue is the file /SAP_Information_System/controllers/add_admin.php. An unauthenticated attacker is able to create a new admin account for the web application with a simple POST request. Exploit details were disclosed.

References

packetstormsecurity.com/files/166609/SAP-Information-System-1.0.0-Missing-Authorization.html · Exploit
vuldb.com · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free