PT-2023-22156 · Sap · Abap Platform+1

CVE-2023-29108 · Publicado 2023-04-11 · Atualizado 2023-04-18

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions ABAP Platform versions 7.85 through 7.91 SAP Web Dispatcher versions 7.85 through 7.89

Description The IP filter in ABAP Platform and SAP Web Dispatcher may be vulnerable due to erroneous IP netmask handling, potentially enabling access to backend applications from unwanted sources.

Recommendations For ABAP Platform versions 7.85 through 7.91, update to a version that includes a fix for the IP netmask handling issue. For SAP Web Dispatcher versions 7.85 through 7.89, update to a version that includes a fix for the IP netmask handling issue. As a temporary workaround, consider restricting access to backend applications to minimize the risk of exploitation.

Correção

Enumeração de Fraquezas

CWE-923

Identificadores relacionados

CVE-2023-29108

Produtos afetados

Abap Platform

Sap Web Dispatcher

Referências · 6

• https://launchpad.support.sap.com/#/notes/3315312 · Nota
• https://t.me/cvenotify/47969 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2023-29108 · Aviso do Fabricante
• https://sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2023-29108 · Nota de Segurança
• https://t.me/cibsecurity/61819 · Publicação no Telegram