CVE-2024-54197

Summary

CVE-2024-54197 is a vulnerability affecting SAP NetWeaver Administrator's System Overview component. An authenticated attacker can exploit this issue by crafting specific HTTP requests to enumerate accessible endpoints within the internal network. This vulnerability could lead to Server-Side Request Forgery (SSRF), potentially resulting in unauthorized access to internal resources. However, the impact on data integrity and confidentiality is considered low, as no availability of the application is affected.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.