Description
Under certain conditions SAP SRM-MDM (CATALOG versions 3.0, 7.01, 7.02) utilities functionality allows an attacker to access information of user existence which would otherwise be restricted.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SAP | SAP SRM-MDM CATALOG | 3.0, 7.01, 7.02 | — |