Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
[CVE-2024-37171] Server-Side Request Forgery (SSRF) in SAP Transportation Management (Collaboration Portal)
Vulnerability Description
SAP Transportation Management (Collaboration Portal) allows an attacker with non-administrative privileges to send a crafted request from a vulnerable web application. This will trigger the application handler to send a request to an unintended service, which may reveal information about that service. The information obtained could be used to target internal systems behind firewalls that are normally inaccessible to an attacker from the external network, resulting in a Server-Side Request Forgery vulnerability. There is no effect on integrity or availability of the application.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N
Vulnerability Type
服务端请求伪造(SSRF)
Vulnerability Title
SAP Transportation Management 代码问题漏洞
Vulnerability Description
SAP Transportation Management是德国思爱普（SAP）公司的一种集成了运输车队和物流管理的应用程序，它可以帮助企业降低复杂性、提高效率和敏捷性，从而构建一个更加可持续和抗风险的供应链。 SAP Transportation Management 存在代码问题漏洞，该漏洞源于允许具有非管理员权限的攻击者发送一个经过制作的请求，从易受攻击的Web应用程序触发应用程序处理器向非预期服务发送请求，可能泄露有关该服务的信息，导致服务器端请求伪造（SSRF）漏洞，对应用程序的完整性或可用性无
CVSS Information
N/A
Vulnerability Type
N/A