CVE-2023-24528CWE-862

SAP Fiori apps for Travel Management in SAP ERP (My Travel Requests) - version 600, allows an authenticated attacker to exploit a certain misconfigured…

Medium · published February 14, 2023

CVSS v3.1
6.5
EPSS
0%
Percentile
41.0
In the wild
Unconfirmed
What it is

SAP Fiori apps for Travel Management in SAP ERP (My Travel Requests) - version 600, allows an authenticated attacker to exploit a certain misconfigured application endpoint to view sensitive data. This endpoint is normally exposed over the network and successful exploitation can lead to exposure of data like travel documents.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00486 · 41.0th percentile
Weakness
CWE-862 · Missing Authorization
Published
2023-02-14T03:18Z
EPSS history
Timeline
  • 14 FEB 03:18Z
    SAP Fiori apps for Travel Management in SAP ERP (My Travel Requests) - version 600, allows an authenticated attacker to exploit a certain misconfigured…
    cvelistv5