Improper Access Control in SAP NetWeaver AS for Java

CVE-2023-23857

Summary

An authentication bypass vulnerability in SAP NetWeaver AS for Java - version 7.50 allows attackers without credentials to exploit an open interface. This may lead to unauthorized access to sensitive services through a naming and directory API, enabling attackers to read, modify, or disrupt essential operations across affected systems. The exploitation of this vulnerability can result in unresponsive services, compromising overall system integrity and availability.

References