SAP NetWeaver ABAPのOSコマンド実行脆弱性、修正あり
Summary
SAP NetWeaver ABAPのカーネルに、低権限のユーザーがOSコマンドを実行できる脆弱性が公表されました（CVSS v3は9.9）。ABAPを運用する組織はカーネルの版を確認し、SAP Note 3792735を適用してください。
AI summary
Produced by SecPulse using an external AI model; it may contain mistakes. Check the original description and references below before acting on it.
SAP NetWeaver ABAPのカーネルに、低権限のユーザーがOSコマンドを実行できる脆弱性が公表されました（CVSS v3は9.9）。ABAPを運用する組織はカーネルの版を確認し、SAP Note 3792735を適用してください。
Original description The description as published by the source.
SAP NetWeaver Application Server ABAP and ABAP Platform does not perform necessary authorization checks for certain internal functionality. An attacker with low privileges could invoke affected functionality to execute arbitrary operating system commands on the underlying host. Successful exploitation could impact resources beyond the vulnerable component, resulting in a high impact on confidentiality, integrity and availability of the system.
Source: CVE.org (CVE Program・cvelistV5) NVD GitHub Advisory
References
- web cna@sap.com
- web cna@sap.com
- web nvd.nist.gov
- web github.com