CVE-2024-45283: Information disclosure vulnerability in SAP NetWeaver AS for Java (Destination Service)
SAP NetWeaver AS for Java allows an authorized attacker to obtain sensitive information. The attacker could obtain the username and password when creating an RFC destination. After successful exploitation, an attacker can read the sensitive information but cannot modify or delete the data.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-45283?
CVE-2024-45283 is classified as a medium severity vulnerability as it allows unauthorized access to sensitive information.
How do I fix CVE-2024-45283?
To mitigate CVE-2024-45283, update to the latest version of SAP NetWeaver AS for Java as recommended by SAP's security advisory.
What information can be compromised in CVE-2024-45283?
CVE-2024-45283 can lead to the compromise of usernames and passwords when creating an RFC destination.
Who is affected by CVE-2024-45283?
The vulnerability affects users of SAP NetWeaver AS for Java, particularly those with improper configurations.
Can CVE-2024-45283 be exploited without authorization?
No, CVE-2024-45283 requires an attacker to have authorized access to exploit the vulnerability.