Description
This security note has been updated. For more detailed information, see Security Note 1847764.
The Add-On DMIS contains code that permits the execution of arbitrary program code of the user’s choice. Please observe that Add-On DMIS is also used in the SAP LT Replication Server.
An attacker can therefore control the behavior of the system, or can potentially escalate privileges by executing malicious code, without having their own legitimate credentials.
Available fix and Supported packages
- DMIS | 2010_1_46C | 2010_1_46C
- DMIS | 2010_1_620 | 2010_1_620
- DMIS | 2010_1_640 | 2010_1_640
- DMIS | 2010_1_700 | 2010_1_700
- DMIS | 2010_1_710 | 2010_1_710
- DMIS | 2011_1_620 | 2011_1_620
- DMIS | 2011_1_640 | 2011_1_640
- DMIS | 2011_1_700 | 2011_1_700
- DMIS | 2011_1_710 | 2011_1_710
- DMIS | 2011_1_730 | 2011_1_730
- DMIS | 2011_1_731 | 2011_1_731
- DMIS 2010_1_46C | SAPK-91409INDMIS |
- DMIS 2010_1_620 | SAPK-91509INDMIS |
- DMIS 2010_1_640 | SAPK-91609INDMIS |
- DMIS 2010_1_700 | SAPK-91709INDMIS |
- DMIS 2010_1_710 | SAPK-91809INDMIS |
- DMIS 2011_1_620 | SAPK-11104INDMIS |
- DMIS 2011_1_640 | SAPK-11204INDMIS |
- DMIS 2011_1_700 | SAPK-11304INDMIS |
- DMIS 2011_1_710 | SAPK-11404INDMIS |
- DMIS 2011_1_730 | SAPK-11504INDMIS |
- DMIS 2011_1_731 | SAPK-11604INDMIS |
- DMIS 2010_1_46C | SAPK-91410INDMIS |
- DMIS 2010_1_620 | SAPK-91510INDMIS |
- DMIS 2010_1_640 | SAPK-91610INDMIS |
- DMIS 2010_1_700 | SAPK-91710INDMIS |
- DMIS 2010_1_710 | SAPK-91810INDMIS |
- DMIS 2011_1_620 | SAPK-11105INDMIS |
- DMIS 2011_1_640 | SAPK-11205INDMIS |
- DMIS 2011_1_700 | SAPK-11305INDMIS |
- DMIS 2011_1_710 | SAPK-11405INDMIS |
Affected component
- CA-EUR
European Monetary Union – Euro
CVSS
Score: 0
PoC
Detailed vulnerability information added to RedRays Security Platform. Contact [email protected] for details.
URL
https://launchpad.support.sap.com/#/notes/1795103
