ID

VAR-201702-1124


TITLE

SAP Netweaver Remote Authorization Bypass Vulnerability

Trust: 0.3

sources: BID: 96203

DESCRIPTION

SAP Netweaver is prone to an authorization-bypass vulnerability. Attackers can exploit this issue to gain unauthorized access and obtain sensitive information. This may aid in further attacks.

Trust: 0.3

sources: BID: 96203

AFFECTED PRODUCTS

vendor:sapmodel:netweaverscope:eqversion:0

Trust: 0.3

sources: BID: 96203

THREAT TYPE

network

Trust: 0.3

sources: BID: 96203

TYPE

Input Validation Error

Trust: 0.3

sources: BID: 96203

EXTERNAL IDS

db:BIDid:96203

Trust: 0.3

sources: BID: 96203

REFERENCES

url:http://www.sap.com/

Trust: 0.3

url:https://erpscan.com/press-center/blog/sap-cyber-threat-intelligence-report-february-2017/

Trust: 0.3

url:https://service.sap.com/sap/support/notes/2408892

Trust: 0.3

sources: BID: 96203

CREDITS

The vendor reported this issue.

Trust: 0.3

sources: BID: 96203

SOURCES

db:BIDid:96203

LAST UPDATE DATE

2022-05-17T01:47:54.798000+00:00


SOURCES UPDATE DATE

db:BIDid:96203date:2017-03-07T04:02:00

SOURCES RELEASE DATE

db:BIDid:96203date:2017-02-14T00:00:00