Skip links
Arpine Maghakyan

Arpine Maghakyan

Security Researcher of RedRays.

Security Note Restriction on attachment file types in BPM, SAP security note 1427695

Description

As of SAP NW BPM 7.20 SP0, the possibility to restrict the file types to be used as attachments to BPM tasks and processes was introduced. This eliminated the risk of attaching potentially dangerous files (e.g. with active content aimed to attack the targeted user).

Available fix and Supported packages

  • BPEM-WDUI | 7.20 | 7.20
  • BPEM-BASE | 7.20 | 7.20

Affected component

    BC-BMT-BPM-DSK
    Process Desk

CVSS

Score: 0

Exploit

Exploit is not available.
For detailed information please contact the mail [email protected].

URL

https://launchpad.support.sap.com/#/notes/1427695

TAGS

#Galaxy
#SAP-NW-BPM
#Business-Process-Management
#attachments

More to explorer