CVE-2024-28164: Information Disclosure vulnerability in SAP NetWeaver AS Java (Guided Procedures)
SAP NetWeaver AS Java (CAF - Guided Procedures) allows an unauthenticated user to access non-sensitive information about the server which would otherwise be restricted causing low impact on confidentiality of the application.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-28164?
CVE-2024-28164 has a low impact on confidentiality as it allows unauthenticated users to access non-sensitive server information.
How do I fix CVE-2024-28164?
To address CVE-2024-28164, ensure that proper authentication mechanisms are enforced and restrict access to sensitive information.
Which versions of SAP are affected by CVE-2024-28164?
CVE-2024-28164 specifically affects SAP NetWeaver AS Java version gp-core_7.5.
What type of vulnerability is CVE-2024-28164?
CVE-2024-28164 is an information disclosure vulnerability allowing unauthorized access to non-sensitive data.
Can CVE-2024-28164 be exploited remotely?
Yes, CVE-2024-28164 can be exploited by unauthenticated users remotely to gather non-sensitive server information.