CVEvulnerability

CVE-2023-32115

6.1 MEDIUM Published 2023-06-13 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-06-13
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
4.2 MEDIUM — CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N
CVSS 3.1 ([email protected])
6.1 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N
Weaknesses
CWE-89

Description

An attacker can exploit MDS COMPARE TOOL and use specially crafted inputs to read and modify database commands, resulting in the retrieval of additional information persisted by the system.

Affected configurations

• sap master data synchronization 600 • sap master data synchronization 602 • sap master data synchronization 603 • sap master data synchronization 604 • sap master data synchronization 605 • sap master data synchronization 606 • sap master data synchronization 616

Related

Weakness · CWE (1)

  • CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness

References