Arpine Maghakyan

Arpine Maghakyan

Security Researcher of RedRays.

December 13, 2011
12:00 am

Verb tampering issues in tc~je~trace~app application, SAP security note 1637251

Description

Problems with authorization and authentication checks in conjunction with different HTTP methods used might exist in tc~je~trace~app application.

Available fix and Supported packages

LMNWABASICMBEAN | 7.20 | 7.20
LM NWA BASIC MBEAN 7.20 | SP005 | 000001
LM NWA BASIC MBEAN 7.20 | SP006 | 000000
LM NWA BASIC MBEAN 7.20 | SP007 | 000000

Affected component

CVSS

Score: 0

Exploit

Exploit is not available.
For detailed information please contact the mail [email protected]

URL

https://launchpad.support.sap.com/#/notes/1637251

TAGS

#Verb-Tampering
#HTTP-method
#NWA-NetWeaver-Admin
#DSR

More to explorer

3242933 – [CVE-2022-39802] File path traversal vulnerability in SAP Manufacturing Execution

October 12, 2022

General information Risk: CRITICAL Versions Affected:SAP MFG EXECUTION CORE 15.1SAP MFG EXECUTION CORE 15.2SAP MFG EXECUTION CORE 15.3Vendor URL: https://sap.comBug: File path traversal

SAP Security Patch Day – October 2022

October 11, 2022

Because the SAP threat landscape is always expanding, businesses of all sizes and sectors are in danger of cyberattacks. The following report

SAP Security Patch Day – September 2022

September 13, 2022

Because the SAP threat landscape is always expanding, businesses of all sizes and sectors are in danger of cyberattacks. The following report

[Announcement] RedRays Opened Seed Round Investment

September 3, 2022

Hello ! The RedRays was founded in January 2021. The main goal of RedRays is to narrow the security gap in both the