Описание
In SAP Application Interface Framework File Adapter - version 702, a high privilege user can use a function module to traverse through various layers and execute OS commands directly. By this, such user can control the behaviour of the application. This leads to considerable impact on confidentiality, integrity and availability.
Ссылки
- Permissions Required
- Vendor Advisory
- Permissions Required
- Vendor Advisory
Уязвимые конфигурации
EPSS
8.4 High
CVSS3
9.1 Critical
CVSS3
Дефекты
Связанные уязвимости
In SAP Application Interface Framework File Adapter - version 702, a high privilege user can use a function module to traverse through various layers and execute OS commands directly. By this, such user can control the behaviour of the application. This leads to considerable impact on confidentiality, integrity and availability.
Уязвимость программного средства для разработки и управления интерфейсами приложений SAP Application Interface Framework, связанная с неверным управлением генерацией кода, позволяющая нарушителю оказать воздействие на конфиденциальность, целостность и доступность данных
EPSS
8.4 High
CVSS3
9.1 Critical
CVSS3