CVEvulnerability

CVE-2023-36924

4.9 MEDIUM Published 2023-07-11 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-07-11
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
4.9 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
CVSS 3.1 ([email protected])
4.9 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
Weaknesses
CWE-117

Description

While using a specific function, SAP ERP Defense Forces and Public Security - versions 600, 603, 604, 605, 616, 617, 618, 802, 803, 804, 805, 806, 807, allows an authenticated attacker with admin privileges to write arbitrary data to the syslog file. On successful exploitation, an attacker could modify all the syslog data causing a complete compromise of integrity of the application.

Affected configurations

• sap erp defense forces and public security 600 • sap erp defense forces and public security 603 • sap erp defense forces and public security 604 • sap erp defense forces and public security 605 • sap erp defense forces and public security 616 • sap erp defense forces and public security 617 • sap erp defense forces and public security 618 • sap erp defense forces and public security 802 • sap erp defense forces and public security 803 • sap erp defense forces and public security 804 • sap erp defense forces and public security 805 • sap erp defense forces and public security 806 • sap erp defense forces and public security 807

Related

Weakness · CWE (1)

  • CWE-117 Improper Output Neutralization for Logs weakness

References