Information Disclosure Vulnerability in SAP Commerce Backoffice Search

CVE-2021-27619

What is CVE-2021-27619?

SAP Commerce, specifically within its Backoffice Search functionality, presents a vulnerability where low privileged users can perform searches for attributes intended to remain concealed. Despite the search results being masked, users can exploit the system by incrementally inputting characters, enabling them to reveal sensitive attribute values and leading to potential information disclosure. This flaw poses risks to the confidentiality of user data and requires prompt attention to mitigate potential exposure.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References