CVE-2024-37171
CVSS V2 None
CVSS V3 None
Description
SAP Transportation Management (Collaboration
Portal) allows an attacker with non-administrative privileges to send a crafted
request from a vulnerable web application. This will trigger the application
handler to send a request to an unintended service, which may reveal
information about that service. The information obtained could be used to
target internal systems behind firewalls that are normally inaccessible to an
attacker from the external network, resulting in a Server-Side Request Forgery
vulnerability. There is no effect on integrity or availability of the
application.
Overview
- CVE ID
- CVE-2024-37171
- Assigner
- sap
- Vulnerability Status
- PUBLISHED
- Published Version
- 2024-07-09T04:21:21.292Z
- Last Modified Date
- 2024-07-09T04:21:21.292Z
Weakness Enumerations
References
| Reference URL | Reference Tags |
|---|---|
| https://url.sap/sapsecuritypatchday | |
| https://me.sap.com/notes/3469958 |
Sources
| Source Name | Source URL |
|---|---|
| NIST | https://nvd.nist.gov/vuln/detail/CVE-2024-37171 |
| MITRE | https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-37171 |
History
| Created | Old Value | New Value | Data Type | Notes |
|---|---|---|---|---|
| 2024-07-09 13:06:38 | Added to TrackCVE |