cnvd-2022-56946
Vulnerability from cnvd
Title
SAP Enterprise Extension Defense Forces&Public Security授权问题漏洞
Description
SAP Enterprise Extension Defense Forces＆Public Security是德国SAP公司的一种军事解决方案。用于国防军和公共安全。 SAP Enterprise Extension Defense Forces＆Public Security存在授权问题漏洞，该漏洞源于其在网络上对经过身份验证的用户未执行必要的授权检查，攻击者可利用该漏洞导致特权升级。
Severity
中
Patch Name
SAP Enterprise Extension Defense Forces&Public Security授权问题漏洞的补丁
Patch Description
SAP Enterprise Extension Defense Forces＆Public Security是德国SAP公司的一种军事解决方案。用于国防军和公共安全。 SAP Enterprise Extension Defense Forces＆Public Security存在授权问题漏洞，该漏洞源于其在网络上对经过身份验证的用户未执行必要的授权检查，攻击者可利用该漏洞导致特权升级。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。
Formal description

厂商已发布了漏洞修复程序，请及时关注更新： https://launchpad.support.sap.com/#/notes/3196280

Reference
https://launchpad.support.sap.com/#/notes/3196280
Impacted products
Name
['SAP Enterprise Extension Defense Forces & Public Security 605', 'SAP Enterprise Extension Defense Forces & Public Security 606', 'SAP Enterprise Extension Defense Forces & Public Security 616', 'SAP Enterprise Extension Defense Forces & Public Security 617', 'SAP Enterprise Extension Defense Forces & Public Security 618', 'SAP Enterprise Extension Defense Forces & Public Security 802', 'SAP Enterprise Extension Defense Forces & Public Security 803', 'SAP Enterprise Extension Defense Forces & Public Security 804', 'SAP Enterprise Extension Defense Forces & Public Security 805', 'SAP Enterprise Extension Defense Forces & Public Security 806']
Show details on source website

To clipboard 

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2022-31592",
      "cveUrl": "https://nvd.nist.gov/vuln/detail/CVE-2022-31592"
    }
  },
  "description": "SAP Enterprise Extension Defense Forces\uff06Public Security\u662f\u5fb7\u56fdSAP\u516c\u53f8\u7684\u4e00\u79cd\u519b\u4e8b\u89e3\u51b3\u65b9\u6848\u3002\u7528\u4e8e\u56fd\u9632\u519b\u548c\u516c\u5171\u5b89\u5168\u3002\n\nSAP Enterprise Extension Defense Forces\uff06Public Security\u5b58\u5728\u6388\u6743\u95ee\u9898\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u5176\u5728\u7f51\u7edc\u4e0a\u5bf9\u7ecf\u8fc7\u8eab\u4efd\u9a8c\u8bc1\u7684\u7528\u6237\u672a\u6267\u884c\u5fc5\u8981\u7684\u6388\u6743\u68c0\u67e5\uff0c\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u5bfc\u81f4\u7279\u6743\u5347\u7ea7\u3002",
  "formalWay": "\u5382\u5546\u5df2\u53d1\u5e03\u4e86\u6f0f\u6d1e\u4fee\u590d\u7a0b\u5e8f\uff0c\u8bf7\u53ca\u65f6\u5173\u6ce8\u66f4\u65b0\uff1a\r\nhttps://launchpad.support.sap.com/#/notes/3196280",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2022-56946",
  "openTime": "2022-08-15",
  "patchDescription": "SAP Enterprise Extension Defense Forces\uff06Public Security\u662f\u5fb7\u56fdSAP\u516c\u53f8\u7684\u4e00\u79cd\u519b\u4e8b\u89e3\u51b3\u65b9\u6848\u3002\u7528\u4e8e\u56fd\u9632\u519b\u548c\u516c\u5171\u5b89\u5168\u3002\r\n\r\nSAP Enterprise Extension Defense Forces\uff06Public Security\u5b58\u5728\u6388\u6743\u95ee\u9898\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u5176\u5728\u7f51\u7edc\u4e0a\u5bf9\u7ecf\u8fc7\u8eab\u4efd\u9a8c\u8bc1\u7684\u7528\u6237\u672a\u6267\u884c\u5fc5\u8981\u7684\u6388\u6743\u68c0\u67e5\uff0c\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u5bfc\u81f4\u7279\u6743\u5347\u7ea7\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "SAP Enterprise Extension Defense Forces\u0026Public Security\u6388\u6743\u95ee\u9898\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": [
      "SAP Enterprise Extension Defense Forces \u0026 Public Security 605",
      "SAP Enterprise Extension Defense Forces \u0026 Public Security 606",
      "SAP Enterprise Extension Defense Forces \u0026 Public Security 616",
      "SAP Enterprise Extension Defense Forces \u0026 Public Security 617",
      "SAP Enterprise Extension Defense Forces \u0026 Public Security 618",
      "SAP Enterprise Extension Defense Forces \u0026 Public Security 802",
      "SAP Enterprise Extension Defense Forces \u0026 Public Security 803",
      "SAP Enterprise Extension Defense Forces \u0026 Public Security 804",
      "SAP Enterprise Extension Defense Forces \u0026 Public Security 805",
      "SAP Enterprise Extension Defense Forces \u0026 Public Security 806"
    ]
  },
  "referenceLink": "https://launchpad.support.sap.com/#/notes/3196280",
  "serverity": "\u4e2d",
  "submitTime": "2022-07-15",
  "title": "SAP Enterprise Extension Defense Forces\u0026Public Security\u6388\u6743\u95ee\u9898\u6f0f\u6d1e"
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.