The SAP AIF (ODATA service) - versions 755, 756, discloses more detailed information than is required. An authorized attacker can use the collected information possibly to exploit the component. As a result, an attacker can cause a low impact on the confidentiality of the application.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Application_interface_framework | Sap | 755 (including) | 755 (including) |
| Application_interface_framework | Sap | 756 (including) | 756 (including) |