CVE-2024-25642

Mô tả

Tham khảo

• seclists.org/fulldisclosure/2024/May/26 · Mailing List
• me.sap.com/notes/3424610 · Permissions Required
• sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html · Vendor Advisory

Lỗ hổng khác của cloud connector

• CVE-2023-49578THẤP 3.5SAP Cloud Connector - version 2.0, allows an authenticated user with low privilege to perform Denial of service attack from adjacent UI by s…
• CVE-2021-33695NGHIÊM TRỌNG 9.1Potentially, SAP Cloud Connector, version - 2.0 communication with the backend is accepted without sufficient validation of the certificate.
• CVE-2021-33694TRUNG BÌNH 4.8SAP Cloud Connector, version - 2.0, does not sufficiently encode user-controlled inputs, allowing an attacker with Administrator rights, to …
• CVE-2021-33693TRUNG BÌNH 6.8SAP Cloud Connector, version - 2.0, allows an authenticated administrator to modify a configuration file to inject malicious codes that coul…
• CVE-2021-33692CAO 7.5SAP Cloud Connector, version - 2.0, allows the upload of zip files as backup. This backup file can be tricked to inject special elements suc…