CVE-2025-0071 — Information Disclosure vulnerability in SAP Web Dispatcher and Internet Communication Manager

CVE-2025-0071

Information Disclosure vulnerability in SAP Web Dispatcher and Internet Communication Manager PUBLISHED

Description (CNA)

SAP Web Dispatcher and Internet Communication Manager allow an attacker with administrative privileges to enable debugging trace mode with a specific parameter value. This exposes unencrypted passwords in the logs, causing a high impact on the confidentiality of the application. There is no impact on integrity or availability.

Affected (CNA)

Vendor / product	Versions
SAP_SE / SAP Web Dispatcher and Internet Communication Manager	affected KRNL64UC 7.53; affected WEBDISP 7.53; affected 7.54; affected 7.77; affected 7.89; affected 7.93; affected KERNEL 7.53; affected 9.14

CWE

CWE-532

References

https://me.sap.com/notes/3558132
https://url.sap/sapsecuritypatchday

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.