Skip to content
OpenAdvisories
Medium · 4.1 CVE-2024-22124 EUVD-2024-19720GHSA-57gj-f9mq-4c5v

Information Disclosure vulnerability in SAP NetWeaver Internet Communication Manager

Published Jan 9, 2024 · Updated Nov 14, 2024 · Assigned by sap

Description

Under certain conditions, Internet Communication Manager (ICM) or SAP Web Dispatcher - versions KERNEL 7.22, KERNEL 7.53, KERNEL 7.54, KRNL64UC 7.22, KRNL64UC 7.22EXT, KRNL64UC 7.53, KRNL64NUC 7.22, KRNL64NUC 7.22_EXT, WEBDISP 7.22_EXT, WEBDISP 7.53, WEBDISP 7.54, could allow an attacker to access information which would otherwise be restricted causing high impact on confidentiality.

Affected products

VendorProductAffectedFixed
SAP_SE SAP NetWeaver (Internet Communication Manager) KERNEL 7.22, KERNEL 7.53, KERNEL 7.54, KRNL64UC 7.22, KRNL64UC 7.22EXT, KRNL64UC 7.53, KRNL64NUC 7.22, KRNL64NUC 7.22_EXT, WEBDISP 7.22_EXT, WEBDISP 7.53, WEBDISP 7.54 —

Advisories 1

References