CVE-2023-29189: HTTP Verb Tampering vulnerability in SAP CRM (WebClient UI)
SAP CRM (WebClient UI) - versions S4FND 102, 103, 104, 105, 106, 107, WEBCUIF, 700, 701, 731, 730, 746, 747, 748, 800, 801, allows an authenticated attacker to modify HTTP verbs used in requests to the web server. This application is exposed over the network and successful exploitation can lead to exposure of form fields
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2023-29189.
What is the severity of CVE-2023-29189?
The severity of CVE-2023-29189 is medium with a severity value of 5.4.
Which versions of SAP CRM (WebClient UI) are affected by CVE-2023-29189?
Versions S4FND 102, 103, 104, 105, 106, 107, WEBCUIF 700, 701, 731, 730, 746, 747, 748, 800, 801 of SAP CRM (WebClient UI) are affected by CVE-2023-29189.
What is the impact of CVE-2023-29189?
Successful exploitation of CVE-2023-29189 can lead to unauthorized modification of HTTP verbs used in requests to the web server.
Where can I find more information about CVE-2023-29189?
You can find more information about CVE-2023-29189 at the following references: [Reference 1](https://launchpad.support.sap.com/#/notes/3269352), [Reference 2](https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html).