Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
[CVE-2024-37180] Information Disclosure vulnerability in SAP NetWeaver Application Server for ABAP and ABAP Platform
Vulnerability Description
Under certain conditions SAP NetWeaver Application Server for ABAP and ABAP Platform allows an attacker to access remote-enabled function module with no further authorization which would otherwise be restricted, the function can be used to read non-sensitive information with low impact on confidentiality of the application.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:N
Vulnerability Type
信息暴露
Vulnerability Title
SAP NetWeaver Application Server 信息泄露漏洞
Vulnerability Description
SAP NetWeaver Application Server是德国思爱普（SAP）公司的一款应用程序服务器。 SAP NetWeaver Application Server存在信息泄露漏洞，该漏洞源于在特定条件下，允许攻击者访问远程启用的功能模块，而无需进一步授权，攻击者利用该漏洞可以读取非敏感信息。
CVSS Information
N/A
Vulnerability Type
N/A