SAP Security Note
High priority
SAP security note 1788426, "Code Injection Vulnerability in CA-EUR (DMIS_CNT)", is a note released on February 12, 2013. Below are the symptom and the SAP recommended solution.
Description
Symptom
CA-EUR (within software component DMIS_CNT) contains code that permits the execution of arbitrary program code of the user's choice.
An attacker can therefore control the behavior of the system or potentially escalate privileges by executing malicious code without having their own legitimate credentials.
Solution
Implement automatic correction instructions in all affected systems. This applies to all systems that contain the software component DMIS_CNT. You can find the correction instructions here.
Reason and prerequisites
The program code allows the definition and execution of user-defined code that changes the system's behavior. A valid and authenticated user is required.
Depending on the code, a user can:
- Inject and run their own code, including overwriting existing code
- Obtain additional information that should not be displayed
- Modify or delete data
- Alter the system's output
- Create new users with higher privileges
- Perform denial of service attacks
CVSS
Score 8.2 Vector: AV:N/AC:M/AU:S/C:P/I:C/A:C
Full note on SAP: SAP Support Launchpad note 1788426
Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].