Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

GHSA-6mjg-37cp-42x5

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-6mjg-37cp-42x5

Improper Privilege Management in sap-xssec ### Impact SAP BTP Security Services Integration Library ([Python] sap-xssec) allows under certain conditions an escalation of privileges. On successful exploitation, an unauthenticated attacker can obtain arbitrary permissions within the application. ### Patches Upgrade to patched version >= 4.1.0 We always recommend to upgrade to the latest released version. ### Workarounds No workarounds ### References https://www.cve.org/CVERecord?id=CVE-2023-50423

gitlab/pypi/sap-xssec/CVE-2023-50423

Improper Privilege Management in sap-xssec SAP BTP Security Services Integration Library ([Python] sap-xssec) allows under certain conditions an escalation of privileges. On successful exploitation, an unauthenticated attacker can obtain arbitrary permissions within the application.

gitlab/pypi/sap-xssec/GMS-2023-6183

Duplicate This advisory duplicates another.