CVE-2024-39593

MEDIUM

SAP Landscape Management - Authenticated Exposure of Sensitive Information via REST Provider Definition Response

Title source: llm
STIX 2.1

Description

SAP Landscape Management allows an authenticated user to read confidential data disclosed by the REST Provider Definition response. Successful exploitation can cause high impact on confidentiality of the managed entities.

References (2)

Core 2
Core References
Permissions Required
https://me.sap.com/notes/3466801

Scores

CVSS v3 6.9
EPSS 0.0017
EPSS Percentile 37.9%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:L/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-200
Status published
Products (1)
sap/landscape_management 3.0
Published Jul 09, 2024
Tracked Since Feb 18, 2026