CVE-2024-25644

U

nder certain conditions SAP NetWeaver WSRM - version 7.50, allows an attacker to access information which would otherwise be restricted, causing low impact on Confidentiality with no impact on Integrity and Availability of the application.

Configurations

Configuration 1 (hide)

cpe:2.3:a:sap:netweaver:7.50:*:*:*:*:*:*:*

History

26 Feb 2025, 15:15

Type Values Removed Values Added
References () https://me.sap.com/notes/3425682 - () https://me.sap.com/notes/3425682 - Permissions Required
References () https://support.sap.com/en/my-support/knowledge-base/security-notes-news.html?anchorId=section_370125364 - () https://support.sap.com/en/my-support/knowledge-base/security-notes-news.html?anchorId=section_370125364 - Vendor Advisory
First Time Sap
Sap netweaver
CWE NVD-CWE-noinfo
CPE cpe:2.3:a:sap:netweaver:7.50:*:*:*:*:*:*:*

21 Nov 2024, 09:01

Type Values Removed Values Added
References () https://me.sap.com/notes/3425682 - () https://me.sap.com/notes/3425682 -
References () https://support.sap.com/en/my-support/knowledge-base/security-notes-news.html?anchorId=section_370125364 - () https://support.sap.com/en/my-support/knowledge-base/security-notes-news.html?anchorId=section_370125364 -

28 Sep 2024, 23:15

Type Values Removed Values Added
CWE CWE-200 CWE-732
Summary (en) Under certain conditions SAP NetWeaver WSRM - version 7.50, allows an attacker to access information which would otherwise be restricted, causing low impact on Confidentiality with no impact on Integrity and Availability of the application. (en) Under certain conditions SAP NetWeaver WSRM - version 7.50, allows an attacker to access information which would otherwise be restricted, causing low impact on Confidentiality with no impact on Integrity and Availability of the application.

Information

Published : 2024-03-12 01:15

Updated : 2025-04-10 19:40


NVD link : CVE-2024-25644

Mitre link : CVE-2024-25644

CVE.ORG link : CVE-2024-25644


JSON object : View

Products Affected
CWE
CWE-732

Incorrect Permission Assignment for Critical Resource

NVD-CWE-noinfo