Beveiligingsadvies

CVE-2025-42955

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-08-12 02:09:43
Laatst bijgewerkt 2025-08-13 20:20:00
Toegewezen door sap
CVSS-score 3.5
Status PUBLISHED

Beschrijving

Due to a missing authorization check in SAP Cloud Connector, an attacker on an adjacent network with low privileges could send a crafted request to the endpoint responsible for testing LDAP connections. A successful exploit could lead to reduced performance, hence a low-impact on availability of the service. Confidentiality and integrity of the data are not affected.