VYPR
← All advisories
Medium severity4.9NVD Advisory· Published Jul 11, 2023· Updated Jun 17, 2026

CVE-2023-36924

CVE-2023-36924

Description

While using a specific function, SAP ERP Defense Forces and Public Security - versions 600, 603, 604, 605, 616, 617, 618, 802, 803, 804, 805, 806, 807, allows an authenticated attacker with admin privileges to write arbitrary data to the syslog file. On successful exploitation, an attacker could modify all the syslog data causing a complete compromise of integrity of the application.

Affected products

15
  • SAP/ERP Defense Forces And Public Security15 versions
    cpe:2.3:a:sap:erp_defense_forces_and_public_security:600:*:*:*:*:*:*:*+ 14 more
    • cpe:2.3:a:sap:erp_defense_forces_and_public_security:600:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:erp_defense_forces_and_public_security:603:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:erp_defense_forces_and_public_security:604:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:erp_defense_forces_and_public_security:605:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:erp_defense_forces_and_public_security:616:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:erp_defense_forces_and_public_security:617:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:erp_defense_forces_and_public_security:618:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:erp_defense_forces_and_public_security:802:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:erp_defense_forces_and_public_security:803:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:erp_defense_forces_and_public_security:804:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:erp_defense_forces_and_public_security:805:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:erp_defense_forces_and_public_security:806:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:erp_defense_forces_and_public_security:807:*:*:*:*:*:*:*
    • (no CPE)range: 600, 603, 604, 605, 616, 617, 618, 802, 803, 804, 805, 806, 807
    • (no CPE)range: 600

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.