PT-2023-22156 · Sap · Abap Platform+1

Published 2023-04-11 · Updated 2023-04-18 · CVE-2023-29108

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions ABAP Platform versions 7.85 through 7.91 SAP Web Dispatcher versions 7.85 through 7.89

Description The IP filter in ABAP Platform and SAP Web Dispatcher may be vulnerable due to erroneous IP netmask handling, potentially enabling access to backend applications from unwanted sources.

Recommendations For ABAP Platform versions 7.85 through 7.91, update to a version that includes a fix for the IP netmask handling issue. For SAP Web Dispatcher versions 7.85 through 7.89, update to a version that includes a fix for the IP netmask handling issue. As a temporary workaround, consider restricting access to backend applications to minimize the risk of exploitation.

Fix

Weakness Enumeration

CWE-923

Related Identifiers

CVE-2023-29108

Affected Products

Abap Platform

Sap Web Dispatcher

References · 6

• https://osv.dev/vulnerability/CVE-2023-29108 · Vendor Advisory
• https://sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-29108 · Security Note
• https://launchpad.support.sap.com/#/notes/3315312 · Note
• https://t.me/cvenotify/47969 · Telegram Post
• https://t.me/cibsecurity/61819 · Telegram Post