Medium priority
SAP security note 2974330, “Unrestricted File Upload vulnerability in SAP NetWeaver Application Server for Java (Process Integration Monitoring)”, is a program error note. Below are the symptom and the SAP recommended solution.
Description
Symptom
Process Integration Monitoring of SAP NetWeaver Application Server for Java allows an attacker with access to the PIMON application, which is available to basic users, to upload any file (including script files) without proper file format validation. The file is transported as an attachment through the system and stored in an uncritical format in the database table. Processing a very large file could render the affected resource completely unavailable.
Solution
The vulnerability is prevented by implementing an allowlist approach and limiting the file size.
- File Size Limit: sndTestMessage.monitor.payload.filesize.limit [MB]
- File Extensions: sndTestMessage.monitor.payload.file.extensions
Apply the Support Packages and Patches referenced by this SAP Security Note. To maintain the properties, log on to SAP NetWeaver Administrator and navigate to Configuration > Infrastructure > Java System Properties. Select the Applications tab and filter for the application name: tc~lm~itsam~co~ui~nwacompmon~wd.
CVSS
Score 6.5 Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
References
Full note on SAP: SAP Support Launchpad note 2974330
Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].
