Description
SAP Commerce Cloud may accept an empty passphrase for user ID and passphrase authentication, allowing users to log into the system without a passphrase.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SAP_SE | SAP Commerce | HY_COM 2105, HY_COM 2205, COM_CLOUD 2211 | — |
Advisories 2
- WID-SEC-2024-0597 SAP Security Patch Day – März 2024 BSI CERT-Bund (WID) · Mar 11, 2024
- WID-SEC-2023-1980 SAP Patchday August 2023 BSI CERT-Bund (WID) · Aug 7, 2023