01642 06 11 11 Arrange Call

Sensitive Data Exposure in SAP Bank Account Management Application

CVE-2023-0023 · MEDIUM

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N

CVE-2023-0023

In SAP Bank Account Management (Manage Banks) application, when a user clicks a smart link to navigate to another app, personal data is shown directly in the URL. They might get captured in log files, bookmarks, and so on disclosing sensitive data of the application.

Learn more about our User Device Pen Test.