PT-2019-4196 · Sap · Sap Netweaver Application Server Java

Published 2019-08-13 · Updated 2019-08-23 · CVE-2019-0345

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions SAP NetWeaver Application Server for Java versions 7.30 through 7.50

Description A remote unauthenticated attacker can exploit a web service in the SAP NetWeaver Application Server for Java by sending a specially crafted XML file. This can trick the application server into leaking authentication credentials for its own SAP Management console, resulting in Server-Side Request Forgery. The issue is related to insufficient request validation on the server side, which can allow an attacker to disclose privileged user credentials using the specially crafted XML file.

Recommendations For versions 7.30 through 7.50, consider restricting access to the vulnerable web service until a patch is available. As a temporary workaround, avoid using the web service in SAP NetWeaver Application Server for Java until the issue is resolved. Restrict access to the SAP Management console to minimize the risk of exploitation.

Fix

SSRF

Weakness Enumeration

CWE-918

Related Identifiers

BDU:2019-04792

CVE-2019-0345

Affected Products

Sap Netweaver Application Server Java

References · 6

• https://launchpad.support.sap.com/#/notes/2813811 · Vendor Advisory
• https://bdu.fstec.ru/vul/2019-04792 · Security Note
• https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=523998017 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-0345 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-0345 · Security Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-0345 · Note