Description
A malicious user can exploit EI SAF component and use specially crafted inputs to execute arbitrary database commands to retrieve, modify, or remove data persisted by the system.
Available fix and Supported packages
- SAP_ABA | 700 | 700
- CRMUIF | 500 | 500
- CRMUIF | 520 | 520
- CRMUIF | 600 | 600
- BBPCRM | 400 | 400
- WEBCUIF | 700 | 700
- WEBCUIF | 701 | 701
- WEBCUIF | 730 | 730
- CRMIS | 400 | 400
- SAP_ABA 700 | SAPKA70023 |
- CRMUIF 520 | SAPK-52012INCRMUIF |
- CRMUIF 600 | SAPK-60011INCRMUIF |
- BBPCRM 400 | SAPKU40018 |
- WEBCUIF 701 | SAPK-70102INWEBCUIF |
- WEBCUIF 700 | SAPK-70009INWEBCUIF |
- WEBCUIF 730 | SAPK-73001INWEBCUIF |
- CRMIS 400 | SAPK-40013INCRMIS |
Affected component
- CA-GTF-IC-SAF
use CRM-BF-SAF(Software Agent Framework)
CVSS
Score: 0
PoC
Detailed vulnerability information added to RedRays Security Platform. Contact [email protected] for details.
URL
https://launchpad.support.sap.com/#/notes/1488240
