CVE-2024-47592 — Information Disclosure Vulnerability in SAP NetWeaver Application Server Java (Logon Application)

CVE-2024-47592

Information Disclosure Vulnerability in SAP NetWeaver Application Server Java (Logon Application) PUBLISHED

Description (CNA)

SAP NetWeaver AS Java allows an unauthenticated attacker to brute force the login functionality in order to identify the legitimate user IDs. This has an impact on confidentiality but not on integrity or availability.

Affected (CNA)

Vendor / product	Versions
SAP_SE / SAP NetWeaver Application Server Java (Logon Application)	affected SERVERCORE 7.5

CWE

CWE-307

References

https://me.sap.com/notes/3393899
https://url.sap/sapsecuritypatchday

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.