Description
While using a specific function, SAP ERP Defense Forces and Public Security - versions 600, 603, 604, 605, 616, 617, 618, 802, 803, 804, 805, 806, 807, allows an authenticated attacker with admin privileges to write arbitrary data to the syslog file. On successful exploitation, an attacker could modify all the syslog data causing a complete compromise of integrity of the application.

Published: 2023-07-11
Score: 4.9 Medium
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

No analysis available yet.

Remediation

No remediation available yet.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
EUVD EUVD EUVD-2023-40844 While using a specific function, SAP ERP Defense Forces and Public Security - versions 600, 603, 604, 605, 616, 617, 618, 802, 803, 804, 805, 806, 807, allows an authenticated attacker with admin privileges to write arbitrary data to the syslog file. On successful exploitation, an attacker could modify all the syslog data causing a complete compromise of integrity of the application.
History

Wed, 23 Oct 2024 17:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Subscriptions

Sap Erp Defense Forces And Public Security
cve-icon MITRE

Status: PUBLISHED

Assigner: sap

Published:

Updated: 2024-10-23T16:21:35.645Z

Reserved: 2023-06-27T21:23:26.300Z

Link: CVE-2023-36924

cve-icon Vulnrichment

Updated: 2024-08-02T17:01:10.031Z

cve-icon NVD

Status : Modified

Published: 2023-07-11T03:15:10.417

Modified: 2024-11-21T08:10:56.230

Link: CVE-2023-36924

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses