CVE-2022-22545

State: Published
Severity: Not scored
Published: Feb 9, 2022
Updated: Aug 3, 2024
Reserved: Jan 4, 2022

Description

A high privileged user who has access to transaction SM59 can read connection details stored with the destination for http calls in SAP NetWeaver Application Server ABAP and ABAP Platform - versions 700, 701, 702, 710, 711, 730, 731, 740, 750, 751, 752, 753, 754, 755, 756.

Scores

The record has no CVSS score.

Weaknesses

CWE-200

Affected Products

Product	Versions
SAP NetWeaver Application Server ABAP and ABAP PlatformSAP SE	700Affected 701Affected 702Affected 710Affected 711Affected 730Affected 731Affected 740Affected 750Affected 751Affected 752Affected 753Affected 754Affected 755Affected 756Affected

References

https://launchpad.support.sap.com/#/notes/3128473
https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.