CVE-2024-25644

Under certain conditions SAP NetWeaver WSRM - version 7.50, allows an attacker to access information which would otherwise be restricted, causing low impact on Confidentiality with no impact on Integrity and Availability of the application.
Configurations

Configuration 1 (hide)

cpe:2.3:a:sap:netweaver:7.50:*:*:*:*:*:*:*

History

26 Feb 2025, 15:15

Type Values Removed Values Added
First Time Sap
Sap netweaver
CPE cpe:2.3:a:sap:netweaver:7.50:*:*:*:*:*:*:*
CWE NVD-CWE-noinfo
References () https://me.sap.com/notes/3425682 - () https://me.sap.com/notes/3425682 - Permissions Required
References () https://support.sap.com/en/my-support/knowledge-base/security-notes-news.html?anchorId=section_370125364 - () https://support.sap.com/en/my-support/knowledge-base/security-notes-news.html?anchorId=section_370125364 - Vendor Advisory

21 Nov 2024, 09:01

Type Values Removed Values Added
References () https://me.sap.com/notes/3425682 - () https://me.sap.com/notes/3425682 -
References () https://support.sap.com/en/my-support/knowledge-base/security-notes-news.html?anchorId=section_370125364 - () https://support.sap.com/en/my-support/knowledge-base/security-notes-news.html?anchorId=section_370125364 -

28 Sep 2024, 23:15

Type Values Removed Values Added
Summary (en) Under certain conditions SAP NetWeaver WSRM - version 7.50, allows an attacker to access information which would otherwise be restricted, causing low impact on Confidentiality with no impact on Integrity and Availability of the application. (en) Under certain conditions SAP NetWeaver WSRM - version 7.50, allows an attacker to access information which would otherwise be restricted, causing low impact on Confidentiality with no impact on Integrity and Availability of the application.
CWE CWE-200 CWE-732

12 Mar 2024, 01:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-03-12 01:15

Updated : 2025-04-10 19:40


NVD link : CVE-2024-25644

Mitre link : CVE-2024-25644

CVE.ORG link : CVE-2024-25644


JSON object : View

Products Affected

sap

  • netweaver
CWE
CWE-732

Incorrect Permission Assignment for Critical Resource

NVD-CWE-noinfo