CNVD-2024-23785 — Vulnetix

CNVD-2024-23785 PUBLISHED CVSS 6.5 MEDIUM

SAP Solution Manager是德国思爱普（SAP）公司的一套集系统监控、SAP支持桌面、自助服务、ASAP实施等多个功能为一体的系统管理平台。 SAP Solution Manager 720版本存在输入验证错误漏洞，该漏洞源于对URL验证不充分。经过身份验证的攻击者可利用该漏洞将用户重定向到恶意站点，从而读取或修改信息或使用户遭受网络钓鱼攻击。

Risk Scores

CVSS 3.1

6.5

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L

Affected Products

Vendor	Product	Versions
SAP	Solution Manager	720

Exploit Intelligence

https://launchpad.support.sap.com/#/notes/3270509 (circl)
https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html (circl)

Timeline

Feb 17, 2023 CVE ID Reserved
May 20, 2024 CVE Published

References

https://launchpad.support.sap.com/#/notes/3270509 url
https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html url

Open in Interactive Console →