CVE-2022-24396
High
Description
The Simple Diagnostics Agent - versions 1.0 up to version 1.57, does not perform any authentication checks for functionalities that can be accessed via localhost on http port 3005. Due to lack of authentication checks, an attacker could access administrative or other privileged functionalities and read, modify, or delete sensitive information and configurations.
SeverityHigh
CVSS7.8
Exploit probability44. percentile0.5%
Product
Sap Simple Diagnostics Agent
PublishedMar 10, 2022
First seenMar 10, 2022
Weakness typeCWE-306Missing authentication for critical function
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sap simple_diagnostics_agent | 1.0 ≤ v ≤ 1.57 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.