Beveiligingsadvies

CVE-2025-24875

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-02-11 00:37:32

Laatst bijgewerkt 2025-02-18 18:05:00

Toegewezen door sap

CVSS-score 6.8

Status PUBLISHED

Beschrijving

SAP Commerce, by default, sets certain cookies with the SameSite attribute configured to None (SameSite=None). This includes authentication cookies utilized in SAP Commerce Backoffice. Applying this setting reduces defense in depth against CSRF and may lead to future compatibility issues.

← Alle CVE's bekijken Bekijk op cve.org ↗