SAP LM Authenticated RPD Response Data Disclosure
CVE-2024-39593 Published on July 9, 2024
[CVE-2024-39593] Information Disclosure vulnerability in SAP Landscape Management
SAP Landscape Management allows an authenticated
user to read confidential data disclosed by the REST Provider Definition
response. Successful exploitation can cause high impact on confidentiality of
the managed entities.
Vulnerability Analysis
CVE-2024-39593 can be exploited with network access, requires user interaction and user privileges. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have a high impact on confidentiality, with no impact on integrity, and no impact on availability.
Weakness Type
What is an Information Disclosure Vulnerability?
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
CVE-2024-39593 has been classified to as an Information Disclosure vulnerability or weakness.
Products Associated with CVE-2024-39593
Want to know whenever a new CVE is published for SAP Landscape Management? stack.watch will email you.
Affected Versions
SAP_SE SAP Landscape Management Version VCM 3.00 is affected by CVE-2024-39593Exploit Probability
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.