Description
The Web Database Manager in web-tools for SAP DB before 7.4.03.30 generates predictable session IDs, which allows remote attackers to conduct unauthorized activities.
References
- A111703-2 vendor-advisory
- sapdb-manager-sessionid-predictable(13774) vdb-entry