1. Home
  2. CVE Database
  3. CVE-2023-32115
MEDIUM · 4.2

CVE-2023-32115

An attacker can exploit MDS COMPARE TOOL and use specially crafted inputs to read and modify database commands, resulting in the retrieval of additional information persisted by the system.

Vulnerability Description

An attacker can exploit MDS COMPARE TOOL and use specially crafted inputs to read and modify database commands, resulting in the retrieval of additional information persisted by the system.

CVSS Score

4.2

MEDIUM

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality
LOW
Integrity
LOW
Availability
NONE

Affected Products

VendorProductVersions
SapMaster Data Synchronization600

Related Weaknesses (CWE)

CWE-89

References

FAQ

What is CVE-2023-32115?

CVE-2023-32115 is a vulnerability with a CVSS score of 4.2 (MEDIUM). An attacker can exploit MDS COMPARE TOOL and use specially crafted inputs to read and modify database commands, resulting in the retrieval of additional information persisted by the system.

How severe is CVE-2023-32115?

CVE-2023-32115 has been rated MEDIUM with a CVSS base score of 4.2/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2023-32115?

Check the references section above for vendor advisories and patch information. Affected products include: Sap Master Data Synchronization.