Skip links
🔥🔥🔥 Join us for our upcoming training session at Black Hat MEA: "Securing SAP Systems: Expert Insights and Penetration Testing Techniques" 🛡️🔍

Potential change/disclosure of persisted data, SAP security note 1598806

Description

A malicious user can exploit EH&S and use specially crafted inputs to modify database commands. This results in either the retrieval of additional information, or the modification of data persisted by the system.

Available fix and Supported packages

  • EA-APPL | 500 | 500
  • EA-APPL | 600 | 600
  • EA-APPL | 602 | 602
  • EA-APPL | 603 | 603
  • EA-APPL | 604 | 604
  • EA-APPL | 605 | 605
  • EA-APPL 600 | SAPKGPAD20 |
  • EA-APPL 602 | SAPK-60210INEAAPPL |
  • EA-APPL 603 | SAPK-60309INEAAPPL |
  • EA-APPL 604 | SAPK-60410INEAAPPL |
  • EA-APPL 500 | SAPKGPAC26 |
  • EA-APPL 605 | SAPK-60506INEAAPPL |

Affected component

    EHS-BD-RDF
    Report Definition

CVSS

Score: 0

Exploit

Detailed vulnerability information added to RedRays Security Platform. Contact [email protected] for details.

URL

https://launchpad.support.sap.com/#/notes/1598806

TAGS

#SQL-injection
#database
#EH&amp-S

How to detect over 4100 vulnerabilities in SAP Systems?

More to explorer