Description
Malicious clients can log on to the message server of your SAP system and assume the identity of an application server.
You want to configure the message server in such a way that external clients cannot pose any risks to the operation of the system.
Available fix and Supported packages
- SAP KERNEL 4.6D_EX2 32-BIT | SP2508 | 002508
- SAP KERNEL 4.6D_EX2 64-BIT | SP2508 | 002508
- SAP KERNEL 4.6D_EXT 32-BIT | SP2508 | 002508
- SAP KERNEL 4.6D_EXT 64-BIT | SP2508 | 002508
- SAP KERNEL 6.40 32-BIT | SP316 | 000316
- SAP KERNEL 6.40 32-BIT UNICODE | SP316 | 000316
- SAP KERNEL 6.40 64-BIT | SP316 | 000316
- SAP KERNEL 6.40 64-BIT UNICODE | SP316 | 000316
- SAP KERNEL 6.40_EX2 32-BIT | SP316 | 000316
- SAP KERNEL 6.40_EX2 32-BIT UC | SP316 | 000316
- SAP KERNEL 6.40_EX2 64-BIT | SP316 | 000316
- SAP KERNEL 6.40_EX2 64-BIT UC | SP316 | 000316
Affected component
- BC-CST-MS
Message Service
CVSS
Score: 0
PoC
Detailed vulnerability information added to RedRays Security Platform. Contact [email protected] for details.
URL
https://launchpad.support.sap.com/#/notes/1421005
