Skip links
Arpine Maghakyan

Arpine Maghakyan

Security Researcher of RedRays.

Encryption of credit card data in DSD, SAP security note 1637451

Description

An attacker can discover information relating to credit card data that is used in the Direct Store Delivery (DSD) process.
This information could be used to allow the attacker to specialize their attacks against credit cards.

Available fix and Supported packages

  • EA-APPL | 600 | 600
  • EA-APPL | 602 | 602
  • EA-APPL | 603 | 603
  • EA-APPL | 604 | 604
  • EA-APPL | 605 | 605
  • EA-APPL | 606 | 606
  • EA-APPL 600 | SAPKGPAD21 |
  • EA-APPL 602 | SAPK-60211INEAAPPL |
  • EA-APPL 603 | SAPK-60310INEAAPPL |
  • EA-APPL 604 | SAPK-60411INEAAPPL |
  • EA-APPL 605 | SAPK-60507INEAAPPL |
  • EA-APPL 606 | SAPK-60602INEAAPPL |

Affected component

    LE-DSD-DC-DU
    Download / Upload

CVSS

Score: 0

Exploit

Detailed vulnerability information added to RedRays Security Platform. Contact [email protected] for details.

URL

https://launchpad.support.sap.com/#/notes/1637451

TAGS

#Information-disclosure
#DSD
#credit-card-numbers
#encryption

More to explorer

SAP Cloud Connector Certificate Validation Issue

Date of Release: February 13, 2024 Advisory ID: CVE-2024-25642 Affected Software: SAP Cloud Connector Versions Affected: 2.15.0 to 2.16.1 Vulnerability Summary:A critical vulnerability,