Description
SAP Web Dispatcher and Internet Communication Manager allow an attacker with administrative privileges to enable debugging trace mode with a specific parameter value. This exposes unencrypted passwords in the logs, causing a high impact on the confidentiality of the application. There is no impact on integrity or availability.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SAP_SE | SAP Web Dispatcher and Internet Communication Manager | KRNL64UC 7.53, WEBDISP 7.53, 7.54, 7.77, 7.89, 7.93, KERNEL 7.53, 9.14 | — |
Advisories 2
- NCSC-2025-0076 Kwetsbaarheden verholpen in SAP software NCSC-NL (Netherlands) · Mar 11, 2025
- WID-SEC-2025-0521 SAP Patchday März 2025: Mehrere Schwachstellen BSI CERT-Bund (WID) · Mar 10, 2025