SAP security note 1425847, "SMB credential reflection in SAP JEE telnet admin console". Below are the symptom, SAP recommended solution and the affected software components.
Description
Symptom
Once connected to the JEE telnet administration console, a specific command can be executed causing an SMB credential reflection vulnerability.
An attacker can use this vulnerability to replay the user’s credentials back to them and, for example, execute code in the context of the logged-on user.
Solution
Upgrade your SAP J2EE Engine to a version where the issue is fixed.
Reason and prerequisites
Programming error.
Affected components
- SAP-JEECOR: Versions 6.40, 7.00, 7.01, 7.02, 7.10, 7.11, 7.20
Full note on SAP: SAP Support Launchpad note 1425847
Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].