CVE-2023-29111

published 2023-04-11

CVE-2023-29111: The SAP AIF (ODATA service) - versions 755, 756, discloses more detailed information than is required. An authorized attacker can use the collected information…

medium 4.3 CVSS 3.1

AV N AC L PR L UI N S U C L I N A N

The SAP AIF (ODATA service) - versions 755, 756, discloses more detailed information than is required. An authorized attacker can use the collected information possibly to exploit the component. As a result, an attacker can cause a low impact on the confidentiality of the application.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
sap	application_interface_framework	—	—
sap	application_interface_framework	—	—

CWE-200