CVE-2021-27637

概要

参考情報

• launchpad.support.sap.com · Permissions Required
• wiki.scn.sap.com/wiki/pages/viewpage.action · Vendor Advisory

enable now のその他の脆弱性

• CVE-2022-35297中 5.4The application SAP Enable Now does not sufficiently encode user-controlled inputs over the network before it is placed in the output being …
• CVE-2020-6197低 3.3SAP Enable Now, before version 1908, does not invalidate session tokens in a timely manner. The Insufficient Session Expiration may allow at…
• CVE-2020-6178中 5.4SAP Enable Now, before version 1911, sends the Session ID cookie value in URL. This might be stolen from the browser history or log files, l…
• CVE-2019-0405高 7.5SAP Enable Now, before version 1911, leaks information about the existence of a particular user which can be used to construct a list of use…
• CVE-2019-0404高 7.5SAP Enable Now, before version 1911, leaks information about network configuration in the server error messages, leading to Information Disc…