CVE-2023-36924 Log Injection vulnerability in SAP ERP Defense Forces and Public Security
An authenticated admin can inject arbitrary data into syslog files, compromising application integrity in SAP ERP Defense Forces and Public Security.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2023-36924?
CVE-2023-36924 is a medium-severity vulnerability in SAP_SE SAP ERP Defense Forces and Public Security, published on 11 Jul 2023. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
While using a specific function, SAP ERP Defense Forces and Public Security - versions 600, 603, 604, 605, 616, 617, 618, 802, 803, 804, 805, 806, 807, allows an authenticated attacker with admin privileges to write arbitrary data to the syslog file. On successful exploitation, an attacker could modify all the syslog data causing a complete compromise of integrity of the application.
Weakness: CWE-117
Which versions are affected by CVE-2023-36924?
It affects 1 product.
Products include Sap Erp Defense Forces and Public Security.
How do I fix CVE-2023-36924?
No fix has been published for CVE-2023-36924 yet. Limit exposure of the affected software until one is available.
Is CVE-2023-36924 being exploited?
There is no known exploitation of CVE-2023-36924 in the wild and no public exploit code.
Sources
Also known as GHSA-pr3p-hv9q-44xx.