CVE-2025-42875: CVE-2025-42875: kritik işlevde kimlik doğrulaması eksik

Açıklama (NVD)

The SAP Internet Communication Framework does not conduct any authentication checks for features that need user identification allowing an attacker to reuse authorization tokens, violating secure authentication practices causing low impact on Confidentiality, Integrity and Availability of the application.

Özet bilgiler

CVSS v3.1

6.6 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L

EPSS

%0,34 (yüzdelik 28)

CWE

CWE-306

Yama

Yok / bilinmiyor

Kaynaklar

• NVD kaydı
• me.sap.com
• url.sap
• CWE-306