Statutory Reporting App: Local File Read via Unsecured Storage
CVE-2023-42475 Published on October 10, 2023
Information Disclosure Vulnerability in Statutory Reporting
The Statutory Reporting application has a vulnerable file storage location, potentially enabling low privileged attacker to read server files with minimal impact on confidentiality.
Vulnerability Analysis
CVE-2023-42475 can be exploited with network access, and requires small amount of user privileges. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have a small impact on confidentiality, a small impact on integrity and availability.
Weakness Type
Generation of Error Message Containing Sensitive Information
The software generates an error message that includes sensitive information about its environment, users, or associated data.
Products Associated with CVE-2023-42475
You can be notified by email with stack.watch whenever vulnerabilities like CVE-2023-42475 are published in SAP S4hana:
Affected Versions
SAP_SE SAP S/4HANA Core:- Version S4CORE 102 is affected.
- Version S4CORE 103 is affected.
- Version S4CORE 104 is affected.
- Version S4CORE 105 is affected.
- Version S4CORE 106 is affected.
- Version SAPSCORE 128 is affected.
Exploit Probability
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.