Description
An attacker can exploit MDS COMPARE TOOL and use specially crafted inputs to read and modify database commands, resulting in the retrieval of additional information persisted by the system.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
SAP_SE Master Data Synchronization (MDS COMPARE TOOL)
Default version status: unaffected
SAP_APPL 600affectedSAP_APPL 602affectedSAP_APPL 603affectedSAP_APPL 604affectedSAP_APPL 605affectedSAP_APPL 606affectedSAP_APPL 616affected