CVE-2025-30017

{"id": "CVE-2025-30017", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "cna@sap.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.4, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "impactScore": 2.5, "exploitabilityScore": 1.8}]}, "published": "2025-04-08T08:15:17.650", "references": [{"url": "https://me.sap.com/notes/3558864", "source": "cna@sap.com"}, {"url": "https://url.sap/sapsecuritypatchday", "source": "cna@sap.com"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Primary", "source": "cna@sap.com", "description": [{"lang": "en", "value": "CWE-862"}]}], "descriptions": [{"lang": "en", "value": "Due to a missing authorization check, an authenticated attacker could upload a file as a template for solution documentation in SAP Solution Manager 7.1. After successful exploitation, an attacker can cause limited impact on the integrity and availability of the application."}, {"lang": "es", "value": "Debido a la falta de una verificaci\u00f3n de autorizaci\u00f3n, un atacante autenticado podr\u00eda cargar un archivo como plantilla para la documentaci\u00f3n de la soluci\u00f3n en SAP Solution Manager 7.1. Tras una explotaci\u00f3n exitosa, un atacante puede tener un impacto limitado en la integridad y disponibilidad de la aplicaci\u00f3n."}], "lastModified": "2025-04-08T18:13:53.347", "sourceIdentifier": "cna@sap.com"}