ZeroHour

CVE-2023-0023

CVSS 3.1
5.7 medium
EPSS
<1%p42
Published
()
Modified
Description

In SAP Bank Account Management (Manage Banks) application, when a user clicks a smart link to navigate to another app, personal data is shown directly in the URL. They might get captured in log files, bookmarks, and so on disclosing sensitive data of the application.

Vendors
sap
Products
bank account management
Weakness
CWE-200
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N

In the news

No ingested article mentions this CVE yet.