CVE-2024-47592: Information Disclosure Vulnerability in SAP NetWeaver Application Server Java (Logon Application)
SAP NetWeaver AS Java allows an unauthenticated attacker to brute force the login functionality in order to identify the legitimate user IDs. This has an impact on confidentiality but not on integrity or availability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-47592?
The severity of CVE-2024-47592 is classified as a medium risk due to the potential for unauthorized user enumeration.
How do I fix CVE-2024-47592?
To fix CVE-2024-47592, apply the latest security patches provided by SAP for the NetWeaver AS Java.
Who is affected by CVE-2024-47592?
CVE-2024-47592 affects users of SAP NetWeaver Application Server Java, particularly those with login functionalities.
What is the impact of CVE-2024-47592?
CVE-2024-47592 impacts the confidentiality of user information by allowing attackers to brute force login credentials.
Can CVE-2024-47592 be exploited remotely?
Yes, CVE-2024-47592 can be exploited remotely, as it allows unauthenticated attackers to attempt brute force attacks.