CVE-2023-0023CWE-200

Information Disclosure in SAP Bank Account Management (Manage Banks)

Medium · published January 10, 2023

CVSS v3.1
4.5
EPSS
1%
Percentile
43.4
In the wild
Unconfirmed
What it is

In SAP Bank Account Management (Manage Banks) application, when a user clicks a smart link to navigate to another app, personal data is shown directly in the URL. They might get captured in log files, bookmarks, and so on disclosing sensitive data of the application.

The record
Technical detail
CVSS v3.1
4.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00521 · 43.4th percentile
Weakness
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
Published
2023-01-10T03:32Z
EPSS history
Timeline
  • 10 JAN 03:32Z
    Information Disclosure in SAP Bank Account Management (Manage Banks)
    cvelistv5