SAP security note 1796264, "Code injection vulnerability in LDAP- and VSCAN-Customizing", is a note. Below are the symptom, SAP recommended solution and the affected software components.
Description
Symptom
LDAP- and VSCAN-Customizing contains code that permits the execution of arbitrary program code of the user's choice.
An attacker can therefore control the behavior of the system, or can potentially escalate privileges by executing malicious code, without having their own legitimate credentials.
Solution
Implement the program change of this note or the corresponding support package.
Reason and prerequisites
The program code contains a possibility to define and execute user-defined code that changes the behavior of the system. A valid and authenticated user is required.
Depending on the code, the user can:
- Inject and run their own code.
- Obtain additional information that should not be displayed.
- Modify data, delete data.
- Modify the output of the system.
- Create new users with higher privileges.
- Perform a denial of service attack.
CVSS
Score 7.1 Vector: AV:N/AC:H/AU:S/C:C/I:C/A:C
References
This note refers to
Affected components
- SAP_BASIS 640 to 640
- SAP_BASIS 700 to 702
- SAP_BASIS 710 to 730
- SAP_BASIS 731 to 731
- SAP_BASIS 740 to 740
Full note on SAP: SAP Support Launchpad note 1796264
Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].