CVE-2024-45283 — Information disclosure vulnerability in SAP NetWeaver AS for Java (Destination Service)
SAP NetWeaver AS for Java allows an authorized attacker to obtain sensitive information. The attacker could obtain the username and password when creating an RFC destination. Af…
Published: 2024-09-10 · CVSS: 6.0 · CVSS 3.1
SAP NetWeaver AS for Java allows an authorized attacker to obtain sensitive information. The attacker could obtain the username and password when creating an RFC destination. After successful exploitation, an attacker can read the sensitive information but cannot modify or delete the data.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7