CVE-2024-39593 [CVE-2024-39593] Information Disclosure vulnerability in SAP Landscape Management
An authenticated user can read confidential data via the REST Provider Definition response in SAP Landscape Management.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2024-39593?
CVE-2024-39593 is a medium-severity vulnerability in SAP_SE SAP Landscape Management, published on 9 Jul 2024. An attacker needs administrator access to exploit it, and only if a user opens a file or follows a link.
Official description
SAP Landscape Management allows an authenticated user to read confidential data disclosed by the REST Provider Definition response. Successful exploitation can cause high impact on confidentiality of the managed entities.
Weakness: CWE-200
Which versions are affected by CVE-2024-39593?
It affects 1 product.
Products include Sap Landscape Management.
How do I fix CVE-2024-39593?
No fix has been published for CVE-2024-39593 yet. Limit exposure of the affected software until one is available.
Is CVE-2024-39593 being exploited?
There is no known exploitation of CVE-2024-39593 in the wild and no public exploit code.
Other vulnerabilities in SAP_SE SAP Landscape Management
- CVE-2019-0261 Auth bypass in SAP HANA Extended Application Services
- CVE-2019-0249 Information disclosure in SAP Landscape Management(VCM)
- CVE-2020-6191 Command injection in SAP Landscape Management
- CVE-2020-6192 Command injection in SAP Landscape Management
- CVE-2023-26458 Information Disclosure vulnerability in SAP Landscape Management
Sources
Also known as GHSA-4w6q-8g24-72g9.