Authentication flaw

2018-08-1416:29:00

PRIOn knowledge base

www.prio-n.com

8.7 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

69.3%

JSON

SAP SRM MDM Catalog versions 3.73, 7.31, 7.32 in (SAP NetWeaver 7.3) - import functionality does not perform authentication checks for valid repository user. This is an unauthenticated functionality that you can use on windows machines to do SMB relaying.

CPENameOperatorVersion
supplier_relationship_management_mdm_catalogeq7.32
supplier_relationship_management_mdm_catalogeq7.31
supplier_relationship_management_mdm_catalogeq3.73

Name	Operator	Version
supplier_relationship_management_mdm_catalog	eq	7.32
supplier_relationship_management_mdm_catalog	eq	7.31
supplier_relationship_management_mdm_catalog	eq	3.73