PT-2022-19222 · Sap · Sap Web Dispatcher+1

Published 2022-04-12 · Updated 2023-08-14 · CVE-2022-28773

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions SAP Web Dispatcher and SAP Internet Communication Manager (affected versions not specified)

Description The issue is caused by an uncontrolled recursion in the application, leading to a denial of service, where the application may crash but can be restarted automatically.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Uncontrolled Recursion

Weakness Enumeration

CWE-674

Related Identifiers

CVE-2022-28773

Affected Products

Internet Communication Manager

Sap Web Dispatcher

References · 6

• https://sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-28773 · Security Note
• https://launchpad.support.sap.com/#/notes/3111293 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-28773 · Vendor Advisory
• https://t.me/cvenotify/56399 · Telegram Post
• https://t.me/cibsecurity/40646 · Telegram Post