SAP Note 1985100
SAP security note 1985100, "Code injection vulnerability in Class Enhancements". Below are the symptom and SAP recommended solution.
Description
Symptom
A code injection vulnerability has been identified in Class Enhancements, allowing the execution of arbitrary program code. An attacker can control system behavior or escalate privileges by executing malicious code without possessing legitimate credentials.
Solution
Apply the relevant support package mentioned in this note or follow the provided correction instructions.
CVSS
Score 6.0 Vector: AV:N/AC:M/AU:S/C:P/I:P/A:P
Full note on SAP: SAP Support Launchpad note 1985100
Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].
