CVE-2024-34688

Published: Jun 11, 2024Modified: Nov 21, 2024

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

Due to unrestricted access to the Meta Model Repository services in SAP NetWeaver AS Java, attackers can perform DoS attacks on the application, which may prevent legitimate users from accessing it. This can result in no impact on confidentiality and integrity but a high impact on the availability of the application.

Affected (1)

Products: Sap: Netweaver Application Server Java

1 product

Netweaver Application Server Java

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Sap Netweaver Application Server Java	Version mmr_server_7.5

Related CWEs

Uncontrolled Resource Consumption

The product does not properly control the allocation and maintenance of a limited resource, thereby enabling an actor to influence the amount of resources consumed, eventually leading to the exhaustion of available resources.

References (4)

https://me.sap.com/notes/3460407

Source: cna@sap.com

Permissions Required

https://support.sap.com/en/my-support/knowledge-base/security-notes-news.html

Source: cna@sap.com

PatchVendor Advisory

https://me.sap.com/notes/3460407

Source: af854a3a-2127-422b-91ae-364da2661108

Permissions Required

https://support.sap.com/en/my-support/knowledge-base/security-notes-news.html

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

Timeline

No history available yet.