CVE-2023-39439
published 2023-08-08CVE-2023-39439: SAP Commerce Cloud may accept an empty passphrase for user ID and passphrase authentication, allowing users to log into the system without a passphrase.
critical9.8CVSS 3.1
AVNACLPRNUINSUCHIHAH
SAP Commerce Cloud may accept an empty passphrase for user ID and passphrase authentication, allowing users to log into the system without a passphrase.
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| sap | commerce_cloud | — | — |
| sap | commerce_hycom | — | — |
| sap | commerce_hycom | — | — |
| sap_se | sap_commerce | — | — |
| sap_se | sap_commerce | — | — |
| sap_se | sap_commerce | — | — |