CVEvulnerability

CVE-2023-39436

5.8 MEDIUM Published 2023-08-08 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-08-08
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.8 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N
CVSS 3.1 ([email protected])
5.8 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N
Weaknesses
CWE-306

Description

SAP Supplier Relationship Management -versions 600, 602, 603, 604, 605, 606, 616, 617, allows an unauthorized attacker to discover information relating to SRM within Vendor Master Data for Business Partners replication functionality.This information could be used to allow the attacker to specialize their attacks against SRM.

Affected configurations

• sap supplier relationship management 600 • sap supplier relationship management 602 • sap supplier relationship management 603 • sap supplier relationship management 604 • sap supplier relationship management 605 • sap supplier relationship management 606 • sap supplier relationship management 616 • sap supplier relationship management 617

Related

Weakness · CWE (1)

  • CWE-306 Missing Authentication for Critical Functionality weakness

References