Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Information Disclosure in SAP Enable Now
Vulnerability Description
In SAP Enable Now - versions WPB_MANAGER 1.0, WPB_MANAGER_CE 10, WPB_MANAGER_HANA 10, ENABLE_NOW_CONSUMP_DEL 1704, the Referrer-Policy response header is not implemented, allowing an unauthenticated attacker to obtain referrer details, resulting in information disclosure.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Vulnerability Type
故意性的信息暴露
Vulnerability Title
SAP Enable Now 安全漏洞
Vulnerability Description
SAP Enable Now是德国思爱普（SAP）公司的一套协作内容创作、管理和共享平台。该平台主要用于SAP和非SAP系统的在线学习和培训等。 SAP Enable Now存在安全漏洞，该漏洞源于未实现 Referrer-Policy 响应标头，允许未经身份验证的攻击者获取引用者详细信息，从而导致信息泄露，以下产品和版本受到影响：SAP Enable Now WPB_MANAGER 1.0、WPB_MANAGER_CE 10、WPB_MANAGER_HANA 10、ENABLE_NOW_CONSUMP_
CVSS Information
N/A
Vulnerability Type
N/A