Description (CNA)
In SAP Bank Account Management (Manage Banks) application, when a user clicks a smart link to navigate to another app, personal data is shown directly in the URL. They might get captured in log files, bookmarks, and so on disclosing sensitive data of the application.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| SAP / Bank Account Management (Manage Banks) | affected 800; affected 900 |
CWE
CWE-200
References
- https://launchpad.support.sap.com/#/notes/3150704
- https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.