SAP Note 3411067

Escalation of Privileges in SAP Business Technology Platform (BTP) Security Services Integration Libraries

CriticalCVSS 9.1@sap/xssec

CVE(s): CVE-2023-49583 CVE-2023-50422 CVE-2023-50423 CVE-2023-50424
CVSS vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Affected products and versions

Library @sap/xssec
Versions: < 3.6.0
Library cloud-security-services-integration-library
Versions: < 2.17.0 & from 3.0.0 before 3.3.0
Library sap-xssec
Versions: < 4.1.0
Library github.com/sap/cloud-security-client-go
Versions: < 0.17.0

Appears in

Patch Days listing this note, newest first.

January 2024Updateupdate of December 2023 noteCriticalCVSS 9.1
December 2023NewCriticalCVSS 9.1

Open note on SAP for Me (SAP login required)