CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
AI Score
Confidence
High
EPSS
Percentile
30.0%
While using a specific function, SAP ERP Defense Forces and Public Security - versions 600, 603, 604, 605, 616, 617, 618, 802, 803, 804, 805, 806, 807, allows an authenticated attacker with admin privileges to write arbitrary data to the syslog file. On successful exploitation, an attacker could modify all the syslog data causing a complete compromise of integrity of the application.
Vendor | Product | Version | CPE |
---|---|---|---|
sap | erp_defense_forces_and_public_security | 600 | cpe:2.3:a:sap:erp_defense_forces_and_public_security:600:*:*:*:*:*:*:* |
sap | erp_defense_forces_and_public_security | 603 | cpe:2.3:a:sap:erp_defense_forces_and_public_security:603:*:*:*:*:*:*:* |
sap | erp_defense_forces_and_public_security | 604 | cpe:2.3:a:sap:erp_defense_forces_and_public_security:604:*:*:*:*:*:*:* |
sap | erp_defense_forces_and_public_security | 605 | cpe:2.3:a:sap:erp_defense_forces_and_public_security:605:*:*:*:*:*:*:* |
sap | erp_defense_forces_and_public_security | 616 | cpe:2.3:a:sap:erp_defense_forces_and_public_security:616:*:*:*:*:*:*:* |
sap | erp_defense_forces_and_public_security | 617 | cpe:2.3:a:sap:erp_defense_forces_and_public_security:617:*:*:*:*:*:*:* |
sap | erp_defense_forces_and_public_security | 618 | cpe:2.3:a:sap:erp_defense_forces_and_public_security:618:*:*:*:*:*:*:* |
sap | erp_defense_forces_and_public_security | 802 | cpe:2.3:a:sap:erp_defense_forces_and_public_security:802:*:*:*:*:*:*:* |
sap | erp_defense_forces_and_public_security | 803 | cpe:2.3:a:sap:erp_defense_forces_and_public_security:803:*:*:*:*:*:*:* |
sap | erp_defense_forces_and_public_security | 804 | cpe:2.3:a:sap:erp_defense_forces_and_public_security:804:*:*:*:*:*:*:* |
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
AI Score
Confidence
High
EPSS
Percentile
30.0%