Skip links
Vahagn Vardanian

Vahagn Vardanian

Co-founder and CTO of RedRays

Potential remote termination of running processes in Adobe Document Services, SAP security note 2218411

Description

An attacker can remotely exploit SAP functions of Adobe Document Services so that they can terminate it manually.

Available fix and Supported packages

  • ADSSAP | 7.30 | 7.30
  • ADSSAP | 7.31 | 7.31
  • ADSSAP | 7.40 | 7.40
  • ADSSAP | 7.50 | 7.50
  • ADOBE DOCUMENT SERVICES 7.30 | SP015 | 000000
  • ADOBE DOCUMENT SERVICES 7.31 | SP018 | 000000
  • ADOBE DOCUMENT SERVICES 7.40 | SP013 | 000000
  • ADOBE DOCUMENT SERVICES 7.50 | SP002 | 000000

Affected component

    BC-SRV-FP
    Forms Processing

CVSS

Score: 0

PoC

Detailed vulnerability information added to RedRays Security Platform. Contact [email protected] for details.

URL

https://launchpad.support.sap.com/#/notes/2218411

TAGS

#Memory-corruption
#SAP-functions-of-Adobe-Document-Services
#parallelization

More to explorer

Special offer for SAP Security Udemy course!

$ 9.99

Join “SAP Security Core Concepts and Security Administration” which is part of the Blackhat course series.