SAP NetWeaver Application Server ABAP Certificate Validation Security Bypass Vulnerability
BID:99030
Info
SAP NetWeaver Application Server ABAP Certificate Validation Security Bypass Vulnerability
| Bugtraq ID: | 99030 |
| Class: | Design Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 13 2017 12:00AM |
| Updated: | Jun 13 2017 12:00AM |
| Credit: | SAP |
| Vulnerable: |
SAP Netweaver Application Server ABAP 0 |
| Not Vulnerable: | |
Discussion
SAP NetWeaver Application Server ABAP Certificate Validation Security Bypass Vulnerability
SAP NetWeaver Application Server ABAP is prone to a security-bypass vulnerability because the application fails to properly validate certificates.
Successfully exploiting this issue allows attackers to perform man-in-the-middle attacks or impersonate trusted servers, which will aid in further attacks.
SAP NetWeaver Application Server ABAP is prone to a security-bypass vulnerability because the application fails to properly validate certificates.
Successfully exploiting this issue allows attackers to perform man-in-the-middle attacks or impersonate trusted servers, which will aid in further attacks.
Exploit / POC
SAP NetWeaver Application Server ABAP Certificate Validation Security Bypass Vulnerability
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
SAP NetWeaver Application Server ABAP Certificate Validation Security Bypass Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
SAP NetWeaver Application Server ABAP Certificate Validation Security Bypass Vulnerability
References:
References: