admin/cve
1
0
Fork 0
mirror of https://github.com/0xMarcio/cve.git synced 2025-05-06 02:31:38 +00:00
Code Issues Packages Projects Releases Wiki Activity
cve/2023/CVE-2023-24526.md
0xMarcio 48a00929ac Removed duplicates
2024-06-18 02:51:15 +02:00

951 B
Raw Blame History

CVE-2023-24526

Description

SAP NetWeaver Application Server Java for Classload Service - version 7.50, does not perform any authentication checks for functionalities that require user identity, resulting in escalation of privileges. This failure has a low impact on confidentiality of the data such that an unassigned user can read non-sensitive server data.

POC

Reference

Github

No PoCs found on GitHub currently.