Description (CNA)
Under certain conditions SAP SRM-MDM (CATALOG versions 3.0, 7.01, 7.02) utilities functionality allows an attacker to access information of user existence which would otherwise be restricted.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| SAP / SAP SRM-MDM CATALOG | affected 3.0; affected 7.01; affected 7.02 |
CWE
No CWE identifiers supplied.
References
- http://www.securityfocus.com/bid/105077
- https://launchpad.support.sap.com/#/notes/2653846
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=499352742
ADP enrichment
No English description supplied.