Description
An attacker can exploit EHS and use specially crafted inputs
to modify database commands, resulting in the retrieval of additional
information persisted by the system.
Available fix and Supported packages
- EA-APPL | 600 | 600
- EA-APPL | 602 | 602
- EA-APPL | 603 | 603
- EA-APPL | 604 | 604
- EA-APPL | 605 | 605
- EA-APPL | 606 | 606
- EA-APPL | 616 | 616
- EA-APPL | 617 | 617
- SAP_HRGXX | 600 | 600
- SAP_HRGXX | 604 | 604
- EA-APPL 617 | SAPK-61702INEAAPPL |
- EA-APPL 616 | SAPK-61604INEAAPPL |
- EA-APPL 600 | SAPKGPAD25 |
- EA-APPL 602 | SAPK-60215INEAAPPL |
- EA-APPL 603 | SAPK-60314INEAAPPL |
- EA-APPL 604 | SAPK-60415INEAAPPL |
- EA-APPL 605 | SAPK-60512INEAAPPL |
- EA-APPL 606 | SAPK-60610INEAAPPL |
- EA-APPL 616 | SAPK-61605INEAAPPL |
- SAP_HRGXX 600 | SAPK-600A0INSAPHRGXX |
- SAP_HRGXX 604 | SAPK-60466INSAPHRGXX |
Affected component
- EHS-SAF
Product Safety
CVSS
Score: 0
PoC
Detailed vulnerability information added to RedRays Security Platform. Contact [email protected] for details.
URL
https://launchpad.support.sap.com/#/notes/1905242
