Under certain circumstances SAP Dynamic Authorization Management (DAM) by NextLabs (Java Policy Controller versions 7.7 and 8.5) exposes sensitive information in the application logs.
Weakness
The product writes sensitive information to a log file.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Dynamic_authorization_management | Sap | 7.7 (including) | 7.7 (including) |
| Dynamic_authorization_management | Sap | 8.5 (including) | 8.5 (including) |