CVE-2023-49578

Mô tả

Tham khảo

• me.sap.com/notes/3362463 · Permissions Required
• sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html · Vendor Advisory

Lỗ hổng khác của cloud connector

• CVE-2024-25642CAO 7.4Due to improper validation of certificate in SAP Cloud Connector - version 2.0, attacker can impersonate the genuine servers to interact wit…
• CVE-2021-33695NGHIÊM TRỌNG 9.1Potentially, SAP Cloud Connector, version - 2.0 communication with the backend is accepted without sufficient validation of the certificate.
• CVE-2021-33694TRUNG BÌNH 4.8SAP Cloud Connector, version - 2.0, does not sufficiently encode user-controlled inputs, allowing an attacker with Administrator rights, to …
• CVE-2021-33693TRUNG BÌNH 6.8SAP Cloud Connector, version - 2.0, allows an authenticated administrator to modify a configuration file to inject malicious codes that coul…
• CVE-2021-33692CAO 7.5SAP Cloud Connector, version - 2.0, allows the upload of zip files as backup. This backup file can be tricked to inject special elements suc…