PT-2023-4139 · Sap · Sap Erp Defense Forces/Public Security

Published 2023-07-10 · Updated 2023-07-19 · CVE-2023-36924

Positive Technologies (AI Summary)

CVSS v2.0

6.1

Medium

Base vector

AV:N/AC:L/Au:M/C:N/I:C/A:N

Name of the Vulnerable Software and Affected Versions SAP ERP Defense Forces and Public Security versions 600 through 807

Description The issue is related to improper handling of log output, which can be exploited by a remote attacker to overwrite arbitrary files. When using a specific function, an authenticated attacker with admin privileges can write arbitrary data to the syslog file, potentially modifying all syslog data and compromising the application's integrity.

Recommendations For versions 600 through 807, consider restricting access to the syslog file and limiting the privileges of authenticated users to prevent arbitrary data writing until a fix is available. As a temporary workaround, consider disabling the specific function that allows writing to the syslog file until a patch is available.

Fix

Weakness Enumeration

CWE-117

Related Identifiers

BDU:2023-04448

CVE-2023-36924

Affected Products

Sap Erp Defense Forces/Public Security

References · 6

• https://sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-36924 · Security Note
• https://osv.dev/vulnerability/CVE-2023-36924 · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-04448 · Security Note
• https://me.sap.com/notes/3351410 · Note
• https://vuldb.com/?id.233494 · Note