CVE-2024-28163

CWE-732 — Incorrect Permission AssignmentCWE-200 — Information Exposure3 documents3 sources
Severity
5.3MEDIUM
EPSS
0.3%
top 47.87%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
SAP SE SAP Netweaver Process Integration (support WEB Pages)SAP Netweaver Process Integration
Timeline
PublishedMar 12

Description

Under certain conditions, Support Web Pages of SAP NetWeaver Process Integration (PI) - versions 7.50, allows an attacker to access information which would otherwise be restricted, causing low impact on Confidentiality with no impact on Integrity and Availability of the application.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:NExploitability: 3.9 | Impact: 1.4

Affected Packages2 packages

🔴Vulnerability Details

2
CVEList
Information Disclosure vulnerability in SAP NetWeaver Process Integration (Support Web Pages)↗2024-03-12
▶
GHSA
GHSA-v4f5-j5hc-8mj3: Under certain conditions, Support Web Pages of SAP NetWeaver Process Integration (PI) - versions 7↗2024-03-12
▶
CVE-2024-28163 (MEDIUM CVSS 5.3) | Under certain conditions | cvebase.io