CVE-2023-36924

Summary

CVE-2023-36924 is a vulnerability affecting SAP ERP Defense Forces and Public Security versions 600, 603, 604, 605, 616, 617, 618, 802, 803, 804, 805, 806, and 807. This issue allows authenticated attackers with administrative privileges to write arbitrary data to the syslog file via a specific function. By exploiting this weakness, attackers could manipulate all syslog data, leading to a compromise of the application's integrity.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.