Description (CNA)
An attacker can exploit MDS COMPARE TOOL and use specially crafted inputs to read and modify database commands, resulting in the retrieval of additional information persisted by the system.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| SAP_SE / Master Data Synchronization (MDS COMPARE TOOL) | affected SAP_APPL 600; affected SAP_APPL 602; affected SAP_APPL 603; affected SAP_APPL 604; affected SAP_APPL 605; affected SAP_APPL 606; affected SAP_APPL 616 |
CWE
CWE-89
References
- https://launchpad.support.sap.com/#/notes/1794761
- https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.