💣Exploit CVE-2024-47588 - SAP NetWeaver Java Plaintext Credentials Log Exposure Vulnerability

[Maksim]

CVE ID : CVE-2024-47588
Published : Nov. 12, 2024, 1:15 a.m. | 1 hour, 48 minutes ago
Description : In SAP NetWeaver Java (Software Update Manager 1.1), under certain conditions when a software upgrade encounters errors, credentials are written in plaintext to a log file. An attacker with local access to the server, authenticated as a non-administrative user, can acquire the credentials from the logs. This leads to a high impact on confidentiality, with no impact on integrity or availability.
Severity: 4.7 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
Full story here:

To view the content, you need to Sign In or Register.