SAP S4CORE OData meta-data property allows an authenticated attacker to access restricted information due to missing authorization check. This could cause a low impact on confidentiality but integrity and availability of the application are not impacted.
References
Configurations
No configuration.
History
13 May 2025, 01:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-05-13 01:15
Updated : 2025-05-13 01:15
NVD link : CVE-2025-43002
Mitre link : CVE-2025-43002
JSON object : View
Products Affected
No product.
CWE
CWE-472
External Control of Assumed-Immutable Web Parameter