Description (CNA)
SAP Commerce Cloud could retain a sample OAuth2 client with publicly documented sample credentials originating from sample configuration provided in SAP Help Portal documentation. If left unchanged, an unauthenticated attacker could use these well-known credentials to obtain a valid access token and invoke certain APIs to read and modify data. Successful exploitation results in high impact on confidentiality and integrity, with no impact on availability.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| SAP_SE / SAP Commerce Cloud | affected HY_COM 2205; affected COM_CLOUD 2211; affected 2211-JDK21 |
CWE
CWE-1392
References
ADP enrichment
No English description supplied.
No references supplied.