SAP Knowledge Base Article - Preview

3621770 - Vulnerability CVE-2024-9143 - SAP PD

Symptom

  • A security audit has reported a CVE-2024-9143 vulnerability in PD Web:
       Low-level invalid GF(2^m) parameters lead to OOB memory access
  • The vulnerability affects OpenSSL versions: 3.3.0 to 3.3.2, 3.2.0 to 3.2.3, 3.1.0 to 3.1.7, and 3.0.0 to 3.0.15.


Read more...

Environment

SAP PowerDesigner (PD) Web 16.7

Product

SAP PowerDesigner 16.7

Keywords

portal, cmr, scan, weakness, ssl, sso, open , KBA , BC-SYB-PD , PowerDesigner , Problem

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.