CVE-2024-47593: Information Disclosure Vulnerability in SAP NetWeaver Application Server for ABAP and ABAP Platform
First published: Tue Nov 12 2024(Updated: )
SAP NetWeaver Application Server ABAP allows an unauthenticated attacker with network access to read files from the server, which otherwise would be restricted.This attack is possible only if a Web Dispatcher or some sort of Proxy Server is in use and the file in question was previously opened or downloaded in an application based on SAP GUI for HTML Technology. This will not compromise the application's integrity or availability.
Credit: cna@sap.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| SAP NetWeaver Application Server |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the severity of CVE-2024-47593?
CVE-2024-47593 is classified as a high-severity vulnerability due to its potential for unauthorized access to sensitive files.
How do I fix CVE-2024-47593?
To fix CVE-2024-47593, ensure that appropriate access controls are implemented and upgrade to the patched version of SAP NetWeaver Application Server ABAP.
Who is affected by CVE-2024-47593?
CVE-2024-47593 affects installations of SAP NetWeaver Application Server ABAP that utilize a Web Dispatcher or proxy server.
What type of access does CVE-2024-47593 allow for attackers?
CVE-2024-47593 allows unauthenticated attackers to read restricted files from the server if the conditions are met.
When was CVE-2024-47593 disclosed?
CVE-2024-47593 was disclosed in 2024, highlighting vulnerabilities in the SAP NetWeaver Application Server ABAP.
- agent/title
- agent/references
- agent/first-publish-date
- agent/type
- agent/description
- agent/author
- agent/severity
- collector/nvd-api
- source/NVD
- agent/last-modified-date
- agent/weakness
- agent/event
- collector/mitre-cve
- source/MITRE
- agent/source
- agent/softwarecombine
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/sap
- canonical/sap netweaver application server