CVE-2023-0023
Published Jan 10, 2023
Last updated 2 years ago
Overview
- Description
- In SAP Bank Account Management (Manage Banks) application, when a user clicks a smart link to navigate to another app, personal data is shown directly in the URL. They might get captured in log files, bookmarks, and so on disclosing sensitive data of the application.
- Source
- cna@sap.com
- NVD status
- Analyzed
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 3.1
- Type
- Primary
- Base score
- 5.7
- Impact score
- 3.6
- Exploitability score
- 2.1
- Vector string
- CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N
- Severity
- MEDIUM
Weaknesses
- cna@sap.com
- CWE-200
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:sap:bank_account_management:800:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "963456EB-CC8B-4705-B2B5-7AD2014F412F"
},
{
"criteria": "cpe:2.3:a:sap:bank_account_management:900:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "220EFF78-6FB8-4897-84D1-CB63746E22E2"
}
],
"operator": "OR"
}
]
}
]