Vulnerabilities > CVE-2024-25642 - Unspecified vulnerability in SAP Cloud Connector 2.0

047910
CVSS 7.4 - HIGH
Attack vector
NETWORK
Attack complexity
HIGH
Privileges required
NONE
Confidentiality impact
HIGH
Integrity impact
HIGH
Availability impact
NONE
network
high complexity
sap
NVD
Published: 2024-02-13
Updated: 2024-11-21

Summary

Due to improper validation of certificate in SAP Cloud Connector - version 2.0, attacker can impersonate the genuine servers to interact with SCC breaking the mutual authentication. Hence, the attacker can intercept the request to view/modify sensitive information. There is no impact on the availability of the system.

Vulnerable Configurations

Part Description Count
Application
Sap
1

References