Description
SAP CRM ABAP (Insights
Management) allows an authenticated attacker to enumerate HTTP endpoints in the
internal network by specially crafting HTTP requests. On successful
exploitation this can result in information disclosure. It has no impact on
integrity and availability of the application.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SAP_SE | SAP CRM ABAP (Insights Management) | BBPCRM 700, 701, 702, 712, 713, 714 | — |
Advisories 2
- NCSC-2024-0333 Kwetsbaarheden verholpen in SAP producten NCSC-NL (Netherlands) · Aug 13, 2024
- WID-SEC-2024-1818 SAP Security Patch Day – August 2024 BSI CERT-Bund (WID) · Aug 12, 2024