CVEvulnerability

CVE-2022-35293

9.1 CRITICAL Published 2022-08-10 Modified 2026-06-23 Official page ↗
Status
Modified
Published
2022-08-10
Last modified
2026-06-23
Assigner
[email protected]
CVSS 3.1 ([email protected])
9.1 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
9.1 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Weaknesses
CWE-862

Description

Due to insecure session management, SAP Enable Now allows an unauthenticated attacker to gain access to user's account. On successful exploitation, an attacker can view or modify user data causing limited impact on confidentiality and integrity of the application.

Affected configurations

• sap enable now manager 1.0

Related

Weakness · CWE (1)

  • CWE-862 Missing Authorization weakness

References