Description
The SAP AIF (ODATA service) - versions 755, 756, discloses more detailed information than is required. An authorized attacker can use the collected information possibly to exploit the component. As a result, an attacker can cause a low impact on the confidentiality of the application.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SAP | Application Interface Framework (ODATA service) | 755, 756 | — |
Advisories 2
- WID-SEC-2023-1168 SAP Patchday Mai 2023 BSI CERT-Bund (WID) · May 9, 2023
- WID-SEC-2023-0904 SAP Patchday April 2023 BSI CERT-Bund (WID) · Apr 10, 2023