CVEvulnerability

CVE-2023-41366

5.3 MEDIUM Published 2023-11-14 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-11-14
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS 3.1 ([email protected])
5.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Weaknesses
CWE-497

Description

Under certain condition SAP NetWeaver Application Server ABAP - versions KERNEL 722, KERNEL 7.53, KERNEL 7.77, KERNEL 7.85, KERNEL 7.89, KERNEL 7.54, KERNEL 7.91, KERNEL 7.92, KERNEL 7.93, KERNEL 7.94, KERNEL64UC 7.22, KERNEL64UC 7.22EXT, KERNEL64UC 7.53, KERNEL64NUC 7.22, KERNEL64NUC 7.22EXT, allows an unauthenticated attacker to access the unintended data due to the lack of restrictions applied which may lead to low impact in confidentiality and no impact on the integrity and availability of the application.

Affected configurations

• sap netweaver application server abap kernel 7.22 • sap netweaver application server abap kernel 7.53 • sap netweaver application server abap kernel 7.54 • sap netweaver application server abap kernel 7.77 • sap netweaver application server abap kernel 7.85 • sap netweaver application server abap kernel 7.89 • sap netweaver application server abap kernel 7.91 • sap netweaver application server abap kernel 7.92 • sap netweaver application server abap kernel 7.93 • sap netweaver application server abap kernel 7.94 • sap netweaver application server abap kernel64nuc 7.22 • sap netweaver application server abap kernel64nuc 7.22ext • sap netweaver application server abap kernel64uc 7.22 • sap netweaver application server abap kernel64uc 7.22ext • sap netweaver application server abap kernel64uc 7.53

Related

Weakness · CWE (1)

  • CWE-497 Exposure of Sensitive System Information to an Unauthorized Control Sphere weakness

References