SAP Commerce Cloud, versions- 1808,1811,1905,2005, allows an malicious user to bypass existing authentication and permission checks via the '/medias' endpoint hence gaining access to Secure Media folders. This folder could contain sensitive files that results in disclosure of sensitive information and impact system configuration confidentiality.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
sap commerce cloud 1808 |
||
sap commerce cloud 1811 |
||
sap commerce cloud 1905 |
||
sap commerce cloud 2005 |
Vulmon