CVE-2023-36924
MediumCVSS 4.9Exploitation Probability (EPSS)
Low risk31th percentile - higher than 31% of all known CVEs
Summary
In SAP ERP Defense Forces and Public Security systems in versions 600, 603, 604, 605, 616, 617, 618, 802, 803, 804, 805, 806, 807, an authenticated attacker with admin privileges can write arbitrary data to the syslog file. This allows modification of all syslog data, leading to a complete compromise of the application's integrity.
Risk Assessment
Compromising the integrity of syslog data can lead to serious security implications for the application and trust in the system. An attacker could hide their actions, making it difficult to detect incidents.
Recommendation
It is recommended to restrict access to the syslog writing function only to trusted administrators and to monitor any changes to this file. Additionally, consider updating to the latest version of the software to minimize risk.
Original NVD description (English source)
While using a specific function, SAP ERP Defense Forces and Public Security - versions 600, 603, 604, 605, 616, 617, 618, 802, 803, 804, 805, 806, 807, allows an authenticated attacker with admin privileges to write arbitrary data to the syslog file. On successful exploitation, an attacker could modify all the syslog data causing a complete compromise of integrity of the application.