漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
Predictable Object Identifier vulnerability in SAP NetWeaver AS Java (IIOP Service)
Vulnerability Description
Due to the lack of randomness in assigning Object Identifiers in the SAP NetWeaver AS JAVA IIOP service, an authenticated attacker with low privileges could predict the identifiers by conducting a brute force search. By leveraging knowledge of several identifiers generated close to the same time, the attacker could determine a desired identifier which could enable them to access limited system information. This poses a low risk to confidentiality without impacting the integrity or availability of the service.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Vulnerability Type
从可观察状态的可预测
Vulnerability Title
SAP NetWeaver AS Java 安全漏洞
Vulnerability Description
SAP NetWeaver AS Java是德国思爱普（SAP）公司的一个平台系统。 SAP NetWeaver AS Java存在安全漏洞，该漏洞源于缺少随机性，可能导致预测标识符。
CVSS Information
N/A
Vulnerability Type
N/A