high8.8
CVE-2023-39439
SAP Commerce Cloud may accept an empty passphrase for user ID and passphrase authentication, allowing users to log into the system without a passphrase.
Impact
SAP Commerce Cloud may accept an empty passphrase for user ID and passphrase authentication, allowing users to log into the system without a passphrase.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sap | Commerce Cloud | Version 2211 |
| Sap | Commerce Hycom | Versions 2105, 2205 |