Vahagn Vardanian

Co-founder and CTO of RedRays

January 12, 2022
2:38 pm

3132058 – [CVE-2021-44228] Remote Code Execution vulnerability associated with Apache Log4j 2 component used in SAP Cloud-to-Cloud Interoperability

Description

Symptom

The SAP Cloud-to-Cloud Interoperability uses a version of Open Source component Apache Log4j which has vulnerabilities CVE-2021-44228, CVE-2021-45046, CVE-2021-45105, CVE-2021-44832.

Other Terms

Command Injection, OS command injection, Remote Code Execution, Log4j2, CVE-2021-44228, CVE-2021-45046, CVE-2021-45105, CVE-2021-44832.

Solution

Please upgrade your SAP Cloud-to-Cloud Interoperability to the latest version (1.10.0). You may download the latest version from SAP Market Place:

https://launchpad.support.sap.com/#/softwarecenter/template/products/_APP=00200682500000001943&_EVENT=DISPHIER&HEADER=Y&FUNCTIONBAR=N&EVENT=TREE&NE=NAVIGATE&ENR=73555000100200010773&V=MAINT

Available fix and Supported packages

HYPERSCALER-INTEROP|100|100|

Affected component

HYPERSCALER-INTEROP

CVSS

CVSS v3.0 Base Score: 10.0/ 10

Exploit

Detailed vulnerability information added to RedRays Security Platform. Contact support@redrays.io for details.

URL

https://launchpad.support.sap.com/#/notes/3132058

RedRays SAP Security Audit

Explore More

[CVE-2025-31324] Critical SAP NetWeaver Vulnerability Fixed: Actively Exploited in the Wild

April 25, 2025

⚠️ CHECK IF YOU’RE VULNERABLE OR COMPROMISED Vulnerable URL Path: /developmentserver/metadatauploader How to Check If You’re Vulnerable: Test if the following URL

Securing Your SAP Migration: Integrating RedRays ABAP Security Scanner into DevSecOps Workflows

April 18, 2025

As organizations undertake the complex migration from SAP ECC to S/4HANA ahead of the 2027 end-of-support deadline, security concerns often take a

RedRays ABAP Security Scanner – Transforming SAP Security Through Advanced Code Analysis

April 17, 2025

Introducing the First Comprehensive Security Solution Purpose-Built for ABAP Development In today’s hyper-connected digital landscape, where SAP systems manage critical business operations

SAP Security Patch Day – April 2025

April 8, 2025

On April 8, 2025, SAP released its monthly Security Patch Day updates, addressing 19 new vulnerabilities across various SAP products and components.

Vahagn Vardanian

3132058 – [CVE-2021-44228] Remote Code Execution vulnerability associated with Apache Log4j 2 component used in SAP Cloud-to-Cloud Interoperability

Description

Symptom

Other Terms

Solution

Available fix and Supported packages

Exploit

URL

RedRays SAP Security Audit

RedRays SAP Security Audit

Explore More

[CVE-2025-31324] Critical SAP NetWeaver Vulnerability Fixed: Actively Exploited in the Wild

Securing Your SAP Migration: Integrating RedRays ABAP Security Scanner into DevSecOps Workflows

RedRays ABAP Security Scanner – Transforming SAP Security Through Advanced Code Analysis

SAP Security Patch Day – April 2025

Special offer for SAP Security Udemy course!

$ 9.99