SB2024081342 - Multiple vulnerabilities in SAP libraries

Description

This security bulletin contains information about 4 secuirty vulnerabilities.

1) Improper privilege management (CVE-ID: CVE-2023-50424)

The vulnerability allows a remote attacker to compromise the affected application.

The vulnerability exists due to improper privilege management. A remote non-authenticated attacker can bypass implemented security restrictions and obtain arbitrary permissions within the application.

2) Improper privilege management (CVE-ID: CVE-2023-50423)

The vulnerability allows a remote attacker to compromise the affected application.

The vulnerability exists due to improper privilege management. A remote non-authenticated attacker can bypass implemented security restrictions and obtain arbitrary permissions within the application.

3) Improper privilege management (CVE-ID: CVE-2023-50422)

The vulnerability allows a remote attacker to compromise the affected application.

The vulnerability exists due to improper privilege management. A remote non-authenticated attacker can bypass implemented security restrictions and obtain arbitrary permissions within the application.

4) Improper privilege management (CVE-ID: CVE-2023-49583)

The vulnerability allows a remote attacker to compromise the affected application.

The vulnerability exists due to improper privilege management. A remote non-authenticated attacker can bypass implemented security restrictions and obtain arbitrary permissions within the application.

Remediation

Install update from vendor's website.

References

• https://support.sap.com/en/my-support/knowledge-base/security-notes-news/january-2024.html