VULNERABILITY INTELLIGENCE

CVE-2023-36924

CVSS score4.9 MEDIUM
EPSS probability0.47%
CISA KEVNot currently listed
Published2023-07-11
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N

Description

While using a specific function, SAP ERP Defense Forces and Public Security - versions 600, 603, 604, 605, 616, 617, 618, 802, 803, 804, 805, 806, 807, allows an authenticated attacker with admin privileges to write arbitrary data to the syslog file. On successful exploitation, an attacker could modify all the syslog data causing a complete compromise of integrity of the application.

Weakness classification

  • cna@sap.com: CWE-117

Primary references