Skip links
Arpine Maghakyan

Arpine Maghakyan

Security Researcher of RedRays.

Potential disclosure or modification of data in SolMan, SAP security note 1475075

Description

This Security Note has been updated. See Security Note 1552298 for further details.

A malicious user can exploit the Solution Manager and use specially crafted inputs to modify, retrieve or delete any data.

Available fix and Supported packages

  • ST | 400 | 400
  • ST 400 | SAPKITL435 |

Affected component

    SV-SMG-SYS
    Solution Manager System Landscape

CVSS

Score: 0

Exploit

Exploit is not available.
For detailed information please contact the mail [email protected].

URL

https://launchpad.support.sap.com/#/notes/1475075

TAGS

#SMSY
#Structured-Query-Language-(SQL)-injection
#database

More to explorer