PT-2015-1374 · Sap · Sap Netweaver As Java

Published 2015-05-26 · Updated 2018-12-10 · CVE-2015-4091

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions SAP NetWeaver AS Java version 7.4

Description The issue is related to an XML external entity (XXE) vulnerability, which allows remote attackers to send TCP requests to intranet servers or have unspecified other impact via an XML request. This can be achieved by sending a specially crafted XML request to the tcsldwd~main/Main endpoint. The vulnerability is also related to "CIM UPLOAD" and can be exploited by sending specially formed TCP and XML requests, potentially allowing a remote attacker to compromise information security.

Recommendations For SAP NetWeaver AS Java version 7.4, apply the fix as described in SAP Security Note 2090851 to resolve the issue. As a temporary workaround, consider restricting access to the tcsldwd~main/Main endpoint to minimize the risk of exploitation.

Fix

Weakness Enumeration

CWE-91

Related Identifiers

BDU:2015-10467

CVE-2015-4091

Affected Products

Sap Netweaver As Java

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2015-4091 · Security Note
• https://bdu.fstec.ru/vul/2015-10467 · Security Note
• https://websmp230.sap-ag.de/sap/support/notes/2090851 · Note
• http://securityfocus.com/archive/1/536239/100/0/threaded · Note
• http://securityfocus.com/bid/74850 · Note
• http://erpscan.com/advisories/erpscan-15-013-sap-netweaver-as-java-cim-upload-xxe · Note
• https://erpscan.io/advisories/erpscan-15-013-sap-netweaver-as-java-cim-upload-xxe · Note
• http://seclists.org/fulldisclosure/2015/May/96 · Note
• http://packetstormsecurity.com/files/133122/SAP-NetWeaver-AS-Java-XXE-Injection.html · Note