The Web Database Manager in web-tools for SAP DB before 7.4.03.30 generates predictable session IDs, which allows remote attackers to conduct unauthorized activities.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|
| Sap_db | Sap | * | 7.4.03.29 (including) |
References