CVE-2024-25642

概要

参考情報

• seclists.org/fulldisclosure/2024/May/26 · Mailing List
• me.sap.com/notes/3424610 · Permissions Required
• sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html · Vendor Advisory

cloud connector のその他の脆弱性

• CVE-2023-49578低 3.5SAP Cloud Connector - version 2.0, allows an authenticated user with low privilege to perform Denial of service attack from adjacent UI by s…
• CVE-2021-33695緊急 9.1Potentially, SAP Cloud Connector, version - 2.0 communication with the backend is accepted without sufficient validation of the certificate.
• CVE-2021-33694中 4.8SAP Cloud Connector, version - 2.0, does not sufficiently encode user-controlled inputs, allowing an attacker with Administrator rights, to …
• CVE-2021-33693中 6.8SAP Cloud Connector, version - 2.0, allows an authenticated administrator to modify a configuration file to inject malicious codes that coul…
• CVE-2021-33692高 7.5SAP Cloud Connector, version - 2.0, allows the upload of zip files as backup. This backup file can be tricked to inject special elements suc…