Skip links
RedRays - Your SAP Security Solution
Arpine Maghakyan

Arpine Maghakyan

Security Researcher of RedRays.

Security Note Restriction on attachment file types in BPM, SAP security note 1427695

Description

As of SAP NW BPM 7.20 SP0, the possibility to restrict the file types to be used as attachments to BPM tasks and processes was introduced. This eliminated the risk of attaching potentially dangerous files (e.g. with active content aimed to attack the targeted user).

Available fix and Supported packages

  • BPEM-WDUI | 7.20 | 7.20
  • BPEM-BASE | 7.20 | 7.20

Affected component

    BC-BMT-BPM-DSK
    Process Desk

CVSS

Score: 0

Exploit

Detailed vulnerability information added to RedRays Security Platform. Contact [email protected] for details.

URL

https://launchpad.support.sap.com/#/notes/1427695

TAGS

#Galaxy
#SAP-NW-BPM
#Business-Process-Management
#attachments

More to explorer

SAP Cloud Connector Certificate Validation Issue

February 13, 2024

Date of Release: February 13, 2024 Advisory ID: CVE-2024-25642 Affected Software: SAP Cloud Connector Versions Affected: 2.15.0 to 2.16.1 Vulnerability Summary:A critical vulnerability,