CVE-2022-1248

 

Published at: - 06-04-2022 05:15

Last modified: - 13-04-2022 05:13

Total changes: - 4

Description

A vulnerability was found in SAP Information System 1.0 which has been rated as critical. Affected by this issue is the file /SAP_Information_System/controllers/add_admin.php. An unauthenticated attacker is able to create a new admin account for the web application with a simple POST request. Exploit details were disclosed.

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

 

Verification logic

 

Reference

• N/A-Exploit, Third Party Advisory
• http://packetstormsecurity.com/files/166609/SAP-Information-System-1.0.0-Missing-Authorization.html

 

Keywords

NVD

 

CVE-2022-1248

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures