{"id":"CVE-2023-50422","aliases":["EUVD-2023-3112","GHSA-59c9-pxq8-9c73","GHSA-92cg-ghq6-9587","GHSA-m8rw-rcpq-2vp2","GO-2023-2400"],"status":"published","title":"Escalation of Privileges in SAP BTP Security Services Integration Library ([Java] cloud-security-services-integration-library)","description":"SAP BTP Security Services Integration Library ([Java] cloud-security-services-integration-library) - versions below 2.17.0 and versions from 3.0.0 to before 3.3.0, allow under certain conditions an escalation of privileges. On successful exploitation, an unauthenticated attacker can obtain arbitrary permissions within the application.","severity":{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"critical","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.01355,"percentile":0.71821,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-269","CWE-639","CWE-749"],"published":"2023-12-12T01:31:17Z","modified":"2026-10-28T10:40:36Z","fixes":[{"ecosystem":"Maven","package":"com.sap.cloud.security:java-security","fixed_in":["2.17.0","3.3.0"],"sources":["ghsa"]},{"ecosystem":"Maven","package":"com.sap.cloud.security:spring-security","fixed_in":["2.17.0","3.3.0"],"sources":["ghsa"]},{"ecosystem":"Maven","package":"com.sap.cloud.security.xsuaa:spring-xsuaa","fixed_in":["2.17.0","3.3.0"],"sources":["ghsa"]}],"affected":[{"source":"ghsa","ecosystem":"Maven","package":"com.sap.cloud.security:java-security","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.17.0"}]}]},{"source":"ghsa","ecosystem":"Maven","package":"com.sap.cloud.security:java-security","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.0.0"},{"fixed":"3.3.0"}]}]},{"source":"ghsa","ecosystem":"Maven","package":"com.sap.cloud.security:spring-security","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.17.0"}]}]},{"source":"ghsa","ecosystem":"Maven","package":"com.sap.cloud.security:spring-security","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.0.0"},{"fixed":"3.3.0"}]}]},{"source":"ghsa","ecosystem":"Maven","package":"com.sap.cloud.security.xsuaa:spring-xsuaa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.17.0"}]}]},{"source":"ghsa","ecosystem":"Maven","package":"com.sap.cloud.security.xsuaa:spring-xsuaa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.0.0"},{"fixed":"3.3.0"}]}]},{"source":"osv","ecosystem":"Maven","package":"com.sap.cloud.security:java-security","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.17.0"}]}],"versions":["2.10.0","2.10.1","2.10.2","2.10.3","2.10.4","2.10.5","2.11.0","2.11.1","2.11.10","2.11.11","2.11.12","2.11.13","2.11.14","2.11.15","2.11.16","2.11.2","2.11.3","2.11.4","2.11.5","2.11.6","2.11.8","2.11.9","2.12.0","2.12.1","2.12.2","2.12.3","2.13.0","2.13.1","2.13.2","2.13.3","2.13.4","2.13.5","2.13.6","2.13.7","2.13.8","2.13.9","2.14.0","2.14.1","2.14.2","2.15.0","2.16.0","2.4.4","2.4.5","2.5.0","2.5.1","2.5.2","2.5.3","2.6.0","2.6.1","2.6.2","2.7.1","2.7.2","2.7.3","2.7.4","2.7.5","2.7.6","2.7.7","2.7.8","2.8.0","2.8.1","2.8.10","2.8.12","2.8.13","2.8.2","2.8.3","2.8.4","2.8.5","2.8.6","2.8.7","2.8.8","2.8.9","2.9.0"],"bundled":2},{"source":"osv","ecosystem":"Maven","package":"com.sap.cloud.security:java-security","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.0.0"},{"fixed":"3.3.0"}]}],"versions":["3.0.0","3.0.1","3.1.0","3.1.1","3.1.2","3.1.3","3.2.0","3.2.1"],"bundled":2},{"source":"osv","ecosystem":"Maven","package":"com.sap.cloud.security:spring-security","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.17.0"}]}],"versions":["0.1.0","0.1.1","0.1.2","0.1.3","0.1.4","0.1.5","0.1.6","0.1.7","0.2.0","0.3.0","0.3.1","2.10.2","2.10.3","2.10.4","2.10.5","2.11.0","2.11.1","2.11.10","2.11.11","2.11.12","2.11.13","2.11.14","2.11.15","2.11.16","2.11.2","2.11.3","2.11.4","2.11.5","2.11.6","2.11.8","2.11.9","2.12.0","2.12.1","2.12.2","2.12.3","2.13.0","2.13.1","2.13.2","2.13.3","2.13.4","2.13.5","2.13.6","2.13.7","2.13.8","2.13.9","2.14.0","2.14.1","2.14.2","2.15.0","2.16.0"],"bundled":2},{"source":"osv","ecosystem":"Maven","package":"com.sap.cloud.security:spring-security","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.0.0"},{"fixed":"3.3.0"}]}],"versions":["3.0.0","3.0.1","3.1.0","3.1.1","3.1.2","3.1.3","3.2.0","3.2.1"],"bundled":2},{"source":"osv","ecosystem":"Maven","package":"com.sap.cloud.security.xsuaa:spring-xsuaa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.17.0"}]}],"versions":["1.1.0","1.1.0.RC1","1.2.0","1.3.0","1.3.1","1.4.0","1.5.0","1.6.0","1.7.0","2.0.0","2.1.0","2.10.0","2.10.1","2.10.2","2.10.3","2.10.4","2.10.5","2.11.0","2.11.1","2.11.10","2.11.11","2.11.12","2.11.13","2.11.14","2.11.15","2.11.16","2.11.2","2.11.3","2.11.4","2.11.5","2.11.6","2.11.8","2.11.9","2.12.0","2.12.1","2.12.2","2.12.3","2.13.0","2.13.1","2.13.2","2.13.3","2.13.4","2.13.5","2.13.6","2.13.7","2.13.8","2.13.9","2.14.0","2.14.1","2.14.2","2.15.0","2.16.0","2.2.0","2.3.0","2.3.1","2.3.2","2.4.4","2.4.5","2.5.0","2.5.1","2.5.2","2.5.3","2.6.0","2.6.1","2.6.2","2.7.1","2.7.2","2.7.3","2.7.4","2.7.5","2.7.6","2.7.7","2.7.8","2.8.0","2.8.1","2.8.10","2.8.12","2.8.13","2.8.2","2.8.3","2.8.4","2.8.5","2.8.6","2.8.7","2.8.8","2.8.9","2.9.0"],"bundled":2},{"source":"osv","ecosystem":"Maven","package":"com.sap.cloud.security.xsuaa:spring-xsuaa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.0.0"},{"fixed":"3.3.0"}]}],"versions":["3.0.0","3.0.1","3.1.0","3.1.1","3.1.2","3.1.3","3.2.0","3.2.1"],"bundled":2},{"source":"osv","ecosystem":"Go","package":"github.com/sap/cloud-security-client-go","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"0.17.0"}]}],"bundled":2},{"source":"osv","ecosystem":"Go","package":"github.com/sap/cloud-security-client-go","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"0.17.0"}]}],"bundled":2}],"products":[{"vendor":"sap","product":"cloud-security-services-integration-library"},{"vendor":"sap_se","product":"cloud-security-services-integration-library"}],"references":[{"url":"https://me.sap.com/notes/3411067","tags":["vendor-advisory","x_transferred","Permissions Required","advisory","web"]},{"url":"https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html","tags":["x_transferred","Vendor Advisory","web"]},{"url":"https://github.com/SAP/cloud-security-services-integration-library/","tags":["x_transferred","Product","web"]},{"url":"https://mvnrepository.com/artifact/com.sap.cloud.security/java-security","tags":["x_transferred","Product","web"]},{"url":"https://mvnrepository.com/artifact/com.sap.cloud.security/spring-security","tags":["x_transferred","Product","web"]},{"url":"https://mvnrepository.com/artifact/com.sap.cloud.security.xsuaa/spring-xsuaa","tags":["x_transferred","Product","web"]},{"url":"https://blogs.sap.com/2023/12/12/unveiling-critical-security-updates-sap-btp-security-note-3411067/","tags":["x_transferred","Vendor Advisory","article","web"]},{"url":"https://github.com/SAP/cloud-security-services-integration-library/security/advisories/GHSA-59c9-pxq8-9c73","tags":["vendor-advisory","x_transferred","Vendor Advisory","advisory","web"]},{"url":"https://me.sap.com/notes/3413475","tags":["x_transferred","web"]},{"url":"https://github.com/SAP/cloud-security-services-integration-library/commit/4b3e42ab23df6418243b29908b1a2582818d9360","tags":["web"]},{"url":"https://github.com/SAP/cloud-security-services-integration-library/commit/7ce9601979c30ae269a1cbaf7cf33486d10736f1","tags":["web"]},{"url":"https://en.wikipedia.org/wiki/JSON_Web_Token","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-50422","tags":["advisory"]},{"url":"https://blogs.sap.com/2023/12/12/unveiling-critical-security-updates-sap-btp-security-note-3411067","tags":["web"]},{"url":"https://github.com/advisories/GHSA-59c9-pxq8-9c73"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-50424","tags":["advisory"]},{"url":"https://github.com/SAP/cloud-security-client-go","tags":["package"]},{"url":"https://pkg.go.dev/github.com/sap/cloud-security-client-go@v0.17.0","tags":["web"]},{"url":"https://github.com/SAP/cloud-security-client-go/commit/2e3bd63e152e09f267316a1071034eb5d4b7f498","tags":["web","fix"]},{"url":"https://github.com/advisories/GHSA-92cg-ghq6-9587"},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/50xxx/CVE-2023-50422.json","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/50xxx/CVE-2023-50424.json","tags":["advisory"]},{"url":"https://github.com/SAP/cloud-security-services-integration-library","tags":["package"]},{"url":"https://github.com/SAP/cloud-security-client-go/security/advisories/GHSA-m8rw-rcpq-2vp2","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2023-50422","title":"Escalation of Privileges in SAP BTP Security Services Integration Library ([Java] cloud-security-services-integration-library)","description":"SAP BTP Security Services Integration Library ([Java] cloud-security-services-integration-library) - versions below 2.17.0 and versions from 3.0.0 to before 3.3.0, allow under certain conditions an escalation of privileges. On successful exploitation, an unauthenticated attacker can obtain arbitrary permissions within the application.","status":"published","published":"2023-12-12T01:31:17.991Z","modified":"2026-02-25T16:34:36.244Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"critical","assessor":"cna"}],"cwes":["CWE-749"],"updated_at":"2026-11-02T14:35:34.55015Z"}],"euvd":[{"id":"EUVD-2023-3112","description":"SAP BTP Security Services Integration Library ([Java] cloud-security-services-integration-library) - versions below 2.17.0 and versions from 3.0.0 to before 3.3.0, allow under certain conditions an escalation of privileges. On successful exploitation, an unauthenticated attacker can obtain arbitrary permissions within the application.","status":"published","published":"2023-12-12T01:31:17Z","modified":"2026-02-25T16:34:36Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"critical"}],"updated_at":"2026-11-02T19:48:29.128374Z"}],"ghsa":[{"id":"GHSA-59c9-pxq8-9c73","title":"Improper JWT Signature Validation in SAP Security Services Library ","description":"### Impact\nSAP BTP Security Services Integration Library ([Java] cloud-security-services-integration-library) allows under certain conditions an escalation of privileges. On successful exploitation, an unauthenticated attacker can obtain arbitrary permissions within the application.\n\n### Patches\nUpgrade to patched version \u003e= 2.17.0 or \u003e= 3.3.0 \nWe always recommend to upgrade to the latest released version.\n\n### Workarounds\nNo workarounds\n\n### References\nhttps://www.cve.org/CVERecord?id=CVE-2023-50422\n","status":"published","published":"2023-12-13T13:33:57Z","modified":"2024-09-30T19:44:18Z","cvss":[{"version":"4.0","score":9.3,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","level":"critical"},{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"critical"}],"cwes":["CWE-269"],"updated_at":"2026-11-02T14:38:07.852618Z"},{"id":"GHSA-92cg-ghq6-9587","title":"Duplicate Advisory: Privilege escalation in sap/cloud-security-client-go","description":"## Duplicate Advisory\nThis advisory has been withdrawn because it is a duplicate of GHSA-m8rw-rcpq-2vp2. This link is maintained to preserve external references.\n\n## Original Description\nSAP BTP Security Services Integration Library ([Golang] github.com/sap/cloud-security-client-go) - versions \u003c 0.17.0, allow under certain conditions an escalation of privileges. On successful exploitation, an unauthenticated attacker can obtain arbitrary permissions within the application.\n\n","status":"withdrawn","published":"2023-12-12T03:31:45Z","modified":"2024-09-30T18:52:27Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"critical"}],"cwes":["CWE-269","CWE-639","CWE-749"],"updated_at":"2026-11-02T14:38:07.852618Z"}],"nvd":[{"id":"CVE-2023-50422","description":"SAP BTP Security Services Integration Library ([Java] cloud-security-services-integration-library) - versions below 2.17.0 and versions from 3.0.0 to before 3.3.0, allow under certain conditions an escalation of privileges. On successful exploitation, an unauthenticated attacker can obtain arbitrary permissions within the application.","status":"published","published":"2023-12-12T02:15:08.587Z","modified":"2026-06-17T06:39:35.923Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"critical","assessor":"secondary"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"}],"cwes":["CWE-749"],"updated_at":"2026-11-02T14:08:54.010507Z"}],"osv":[{"id":"CVE-2023-50422","title":"Escalation of Privileges in SAP BTP Security Services Integration Library ([Java] cloud-security-services-integration-library)","description":"SAP BTP Security Services Integration Library ([Java] cloud-security-services-integration-library) - versions below 2.17.0 and versions from 3.0.0 to before 3.3.0, allow under certain conditions an escalation of privileges. On successful exploitation, an unauthenticated attacker can obtain arbitrary permissions within the application.","status":"published","published":"2023-12-12T01:31:17.991Z","modified":"2026-10-28T10:40:36.394044056Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"critical"}],"cwes":["CWE-749"],"updated_at":"2026-11-02T15:44:35.245372Z"},{"id":"CVE-2023-50424","title":"Escalation of Privileges in SAP BTP Security Services Integration Library ([Golang] github.com/sap/cloud-security-client-go)","description":"SAP BTP Security Services Integration Library ([Golang] github.com/sap/cloud-security-client-go) - versions \u003c 0.17.0, allow under certain conditions an escalation of privileges. On successful exploitation, an unauthenticated attacker can obtain arbitrary permissions within the application.","status":"published","published":"2023-12-12T01:59:36.703Z","modified":"2026-10-28T02:30:59.487016865Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"critical"}],"cwes":["CWE-749"],"updated_at":"2026-11-02T15:44:35.245372Z"},{"id":"GHSA-59c9-pxq8-9c73","title":"Improper JWT Signature Validation in SAP Security Services Library ","description":"### Impact\nSAP BTP Security Services Integration Library ([Java] cloud-security-services-integration-library) allows under certain conditions an escalation of privileges. On successful exploitation, an unauthenticated attacker can obtain arbitrary permissions within the application.\n\n### Patches\nUpgrade to patched version \u003e= 2.17.0 or \u003e= 3.3.0 \nWe always recommend to upgrade to the latest released version.\n\n### Workarounds\nNo workarounds\n\n### References\nhttps://www.cve.org/CVERecord?id=CVE-2023-50422\n","status":"published","published":"2023-12-13T13:33:57Z","modified":"2026-07-08T06:49:36.116951434Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"critical"},{"version":"4.0","score":9.3,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","level":"critical"}],"cwes":["CWE-269"],"updated_at":"2026-11-02T15:46:38.213481Z"},{"id":"GHSA-92cg-ghq6-9587","title":"Duplicate Advisory: Privilege escalation in sap/cloud-security-client-go","description":"## Duplicate Advisory\nThis advisory has been withdrawn because it is a duplicate of GHSA-m8rw-rcpq-2vp2. This link is maintained to preserve external references.\n\n## Original Description\nSAP BTP Security Services Integration Library ([Golang] github.com/sap/cloud-security-client-go) - versions \u003c 0.17.0, allow under certain conditions an escalation of privileges. On successful exploitation, an unauthenticated attacker can obtain arbitrary permissions within the application.\n\n","status":"withdrawn","published":"2023-12-12T03:31:45Z","modified":"2026-07-08T06:49:36.116951434Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"critical"}],"cwes":["CWE-269","CWE-639","CWE-749"],"updated_at":"2026-11-02T15:46:43.123867Z"},{"id":"GHSA-m8rw-rcpq-2vp2","title":"Improper Privilege Management in github.com/sap/cloud-security-client-go","description":"### Impact\nSAP BTP Security Services Integration Library ([Golang] github.com/sap/cloud-security-client-go) allows under certain conditions an escalation of privileges. On successful exploitation, an unauthenticated attacker can obtain arbitrary permissions within the application.\n\n### Patches\nUpgrade to patched version \u003e= 0.17.0\nWe always recommend to upgrade to the latest released version.\n\n### Workarounds\nNo workarounds\n\n### References\nhttps://www.cve.org/CVERecord?id=CVE-2023-50424","status":"published","published":"2023-12-13T13:34:20Z","modified":"2026-07-08T06:49:36.116951434Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"critical"},{"version":"4.0","score":9.3,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","level":"critical"}],"cwes":["CWE-269"],"updated_at":"2026-11-02T15:46:51.463834Z"},{"id":"GO-2023-2400","title":"Escalation of privileges in github.com/sap/cloud-security-client-go","description":"An unauthenticated attacker can obtain arbitrary permissions within the application under certain conditions.","status":"published","published":"2023-12-16T04:35:08Z","modified":"2026-07-08T06:49:36.116951434Z","updated_at":"2026-11-02T15:47:01.185262Z"}]}}