CVE-2024-25644

U

nder certain conditions SAP NetWeaver WSRM - version 7.50, allows an attacker to access information which would otherwise be restricted, causing low impact on Confidentiality with no impact on Integrity and Availability of the application.

Configurations

Configuration 1 (hide)

cpe:2.3:a:sap:netweaver:7.50:*:*:*:*:*:*:*

History

26 Feb 2025, 15:15

Type Values Removed Values Added
First Time Sap
Sap netweaver
CWE NVD-CWE-noinfo
CPE cpe:2.3:a:sap:netweaver:7.50:*:*:*:*:*:*:*
References () https://me.sap.com/notes/3425682 - () https://me.sap.com/notes/3425682 - Permissions Required
References () https://support.sap.com/en/my-support/knowledge-base/security-notes-news.html?anchorId=section_370125364 - () https://support.sap.com/en/my-support/knowledge-base/security-notes-news.html?anchorId=section_370125364 - Vendor Advisory

21 Nov 2024, 09:01

Type Values Removed Values Added
References () https://me.sap.com/notes/3425682 - () https://me.sap.com/notes/3425682 -
References () https://support.sap.com/en/my-support/knowledge-base/security-notes-news.html?anchorId=section_370125364 - () https://support.sap.com/en/my-support/knowledge-base/security-notes-news.html?anchorId=section_370125364 -

28 Sep 2024, 23:15

Type Values Removed Values Added
Summary (en) Under certain conditions SAP NetWeaver WSRM - version 7.50, allows an attacker to access information which would otherwise be restricted, causing low impact on Confidentiality with no impact on Integrity and Availability of the application. (en) Under certain conditions SAP NetWeaver WSRM - version 7.50, allows an attacker to access information which would otherwise be restricted, causing low impact on Confidentiality with no impact on Integrity and Availability of the application.
CWE CWE-200 CWE-732

Information

Published : 2024-03-12 01:15

Updated : 2025-04-10 19:40


NVD link : CVE-2024-25644

Mitre link : CVE-2024-25644

CVE.ORG link : CVE-2024-25644


JSON object : View

Products Affected
CWE
CWE-732

Incorrect Permission Assignment for Critical Resource

NVD-CWE-noinfo