Lucene search
PRIOn knowledge basePRION:CVE-2023-0017HistoryJan 10, 2023 - 4:15 a.m.
Improper access control
2023-01-1004:15:00
PRIOn knowledge base
www.prio-n.com
10
access control
sap netweaver
unauthorized operations
user data
api
system services
An unauthenticated attacker in SAP NetWeaver AS for Java - version 7.50, due to improper access control, can attach to an open interface and make use of an open naming and directory API to access services which can be used to perform unauthorized operations affecting users and data on the current system. This could allow the attacker to have full read access to user data, make modifications to user data, and make services within the system unavailable.
| CPE | Name | Operator | Version |
|---|---|---|---|
| netweaver_application_server_for_java | eq | 7.50 |
Related
cvelist
cvelist
CVE-2023-0017 Improper access control in SAP NetWeaver AS for Java
2023-01-10 03:18:57
cve
cve
CVE-2023-0017
2023-01-10 04:15:09
nvd
nvd
CVE-2023-0017
2023-01-10 04:15:09
nessus
nessus
SAP NetWeaver AS Java Improper Access Control (3268093)
2023-01-13 00:00:00
cnvd
cnvd
SAP NetWeaver AS Access Control Error Vulnerability
2023-01-12 00:00:00
wallarmlab
wallarmlab
Private APIs at Risk: Q1-2023 API ThreatStats™ Report
2023-06-01 18:52:26
Don’t Let API Leaks Sink Your Ship | API Security Newsletter
2023-02-02 14:24:48