PT-2024-4592 · Sap · Sap Netweaver As Java

Published 2024-05-07 · Updated 2024-08-09 · CVE-2024-34688

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver AS Java (affected versions not specified)

Description: The issue is related to unrestricted access to the Meta Model Repository services in SAP NetWeaver AS Java, allowing attackers to perform Denial of Service (DoS) attacks on the application. This can prevent legitimate users from accessing it, resulting in a high impact on the application's availability but no impact on confidentiality and integrity.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

BDU:2024-05099

CVE-2024-34688

Affected Products

Sap Netweaver As Java

References · 10

• https://nvd.nist.gov/vuln/detail/CVE-2024-34688 · Security Note
• https://osv.dev/vulnerability/CVE-2024-34688 · Vendor Advisory
• https://support.sap.com/en/my-support/knowledge-base/security-notes-news.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-05099 · Security Note
• https://support.sap.com/en/my-support/knowledge-base/security-notes-news/june-2024.html · Note
• https://t.me/cvenotify/82762 · Telegram Post
• https://twitter.com/CVEnew/status/1800360272013717534 · Twitter Post
• https://vuldb.com/ru/?id.267738 · Note
• https://me.sap.com/notes/3460407 · Note
• https://t.me/cvenotify/90054 · Telegram Post