Skip to content
CVE PROGRAM SOURCE RECORD7.3 High

CVE-2022-1248

SAP Information System POST Request add_admin.php improper authentication

Description

A vulnerability was found in SAP Information System 1.0 which has been rated as critical. Affected by this issue is the file /SAP_Information_System/controllers/add_admin.php. An unauthenticated attacker is able to create a new admin account for the web application with a simple POST request. Exploit details were disclosed.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

unspecified SAP Information System

  • 1.0affected

References