Description
A malicious user can exploit Custom Development Management Cockpit(ST-PI Service Pack Level SP00-SP03) and use specially crafted inputs to modify data-base commands, resulting in the retrieval of additional information persisted by the system.
Available fix and Supported packages
- ST-PI | 2008_1_46C | 2008_1_46C
- ST-PI | 2008_1_620 | 2008_1_620
- ST-PI | 2008_1_640 | 2008_1_640
- ST-PI | 2008_1_700 | 2008_1_700
- ST-PI | 2008_1_710 | 2008_1_710
Affected component
- SV-SMG-CCM-CDM
Custom Development Management Cockpit
CVSS
Score: 0
PoC
Detailed vulnerability information added to RedRays Security Platform. Contact [email protected] for details.
URL
https://launchpad.support.sap.com/#/notes/1510828
