SAP J2EE Engine Unspecified Vulnerability

Bugtraq ID:	49048
Class:	Unknown
CVE:
Remote:	Yes
Local:	Yes
Published:	Aug 05 2011 12:00AM
Updated:	Aug 05 2011 12:00AM
Credit:	Alexander Polyakov
Vulnerable:	SAP J2EE Engine Core 7.30 SAP J2EE Engine Core 7.20 SAP J2EE Engine Core 7.11 SAP J2EE Engine Core 7.10 SAP J2EE Engine Core 7.02 SP03 SAP J2EE Engine Core 7.02 SAP J2EE Engine Core 7.01 SP07 SAP J2EE Engine Core 7.01 SAP J2EE Engine Core 7.00 SP22 SAP J2EE Engine Core 7.00 SP02 SAP J2EE Engine Core 7.00 SAP J2EE Engine Core 6.40 SP26 SAP J2EE Engine Core 6.40
Not Vulnerable:

SAP J2EE Engine Unspecified Vulnerability

SAP J2EE Engine is prone to an unspecified vulnerability.

The impact of this issue is currently unknown. We will update this BID when more information emerges.

SAP J2EE Engine Unspecified Vulnerability

The discoverer of this issue has developed an exploit to demonstrate the issue.

SAP J2EE Engine Unspecified Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Note: The vendor is planning to fix this issue on August 9, 2011.

SAP J2EE Engine Unspecified Vulnerability

References:

• A Crushing Blow At the Heart of SAP J2EE Engine (Alexander Polyakov)
  
• SAP Homepage (SAP)
  
• SAP prepares patch to fix software security flaw (Thomson Reuters)