← back
CVE-2023-0023

Information Disclosure in SAP Bank Account Management (Manage Banks)

CVSS 4.5 MEDIUMEPSS 0.5%CWE-200
In SAP Bank Account Management (Manage Banks) application, when a user clicks a smart link to navigate to another app, personal data is shown directly in the URL. They might get captured in log files, bookmarks, and so on disclosing sensitive data of the application.
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →