CVE-2017-16679

Опубликовано: 12 дек. 2017

Источник: nvd

CVSS3: 6.1

CVSS2: 5.8

EPSS Низкий

Описание

URL redirection vulnerability in SAP's Startup Service, SAP KERNEL 32 NUC, SAP KERNEL 32 Unicode, SAP KERNEL 64 NUC, SAP KERNEL 64 Unicode 7.21, 7.21EXT, 7.22 and 7.22EXT; SAP KERNEL 7.21, 7.22, 7.45, 7.49 and 7.52, that allows an attacker to redirect users to a malicious site.

Ссылки

http://www.securityfocus.com/bid/102157
Third Party Advisory
VDB Entry
https://blogs.sap.com/2017/12/12/sap-security-patch-day-december-2017/
Issue Tracking
Vendor Advisory
https://launchpad.support.sap.com/#/notes/2520995
Permissions Required
Vendor Advisory
http://www.securityfocus.com/bid/102157
Third Party Advisory
VDB Entry
https://blogs.sap.com/2017/12/12/sap-security-patch-day-december-2017/
Issue Tracking
Vendor Advisory
https://launchpad.support.sap.com/#/notes/2520995
Permissions Required
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:sap:sap_kernel:7.21:*:*:*:*:*:*:*

cpe:2.3:o:sap:sap_kernel:7.21ext:*:*:*:*:*:*:*

cpe:2.3:o:sap:sap_kernel:7.22:*:*:*:*:*:*:*

cpe:2.3:o:sap:sap_kernel:7.22ext:*:*:*:*:*:*:*

cpe:2.3:o:sap:sap_kernel:7.45:*:*:*:*:*:*:*

cpe:2.3:o:sap:sap_kernel:7.49:*:*:*:*:*:*:*

cpe:2.3:o:sap:sap_kernel:7.52:*:*:*:*:*:*:*

EPSS

Процентиль: 53%

0.00298

Низкий

6.1 Medium

CVSS3

5.8 Medium

CVSS2

Дефекты

CWE-601

Связанные уязвимости

GHSA-757w-wphr-p72r