SAP Healthcare Industry Solution Privilege Escalation

2013.04.17
Credit: ESNC
Risk: Medium
Local: No
Remote: Yes
CWE: CWE-264


Ogólna skala CVSS: 6.5/10
Znaczenie: 6.4/10
Łatwość wykorzystania: 8/10
Wymagany dostęp: Zdalny
Złożoność ataku: Niska
Autoryzacja: Jednorazowa
Wpływ na poufność: Częściowy
Wpływ na integralność: Częściowy
Wpływ na dostępność: Częściowy

[ESNC-2013-001] Privilege Escalation in SAP Healthcare Industry Solution Please refer to www.esnc.de for the original security advisory, updates and additional information. ------------------------------------------------------------------------ 1. Business Impact ------------------------------------------------------------------------ This vulnerability allows bypassing authority checks that exist before executing a transaction. A transaction in SAP terminology is the execution of a program. By exploiting this vulnerability, an attacker can also control the transaction to be executed, allowing it to obtain critical rights in the system and bypassing certain segregation of duties (SoD) restrictions. Although this vulnerability is found in the SAP industry solution for healthcare, the functionality is also present in the SAP ERP central component (ECC 6). Thus, customers in other industries are also affected. *Risk Level: High* ------------------------------------------------------------------------ 2. Advisory Information ------------------------------------------------------------------------ -- Security Advisory ID: ESNC-2013-001 -- CVE ID: CVE-2013-3061 -- Original Security Advisory: http://www.esnc.de /sap-security-audit-and-scan-services/security-advisories/36-privilege-escalation-in-sap-is- healthcare -- Vendor Patch Date: 2012-06-12 -- Public Advisory Date: 2013-04-16 -- Researcher: Ertunga Arsal ------------------------------------------------------------------------ 3. Vulnerability Information ------------------------------------------------------------------------ -- Vendor: SAP -- Affected Components: IS-H Industry-Specific Component Hospital -- Vulnerable Function: ISHMED-PATRED_TRANSACT_RFCCALL -- Vulnerability Class: Privilege Escalation -- CVSS v2 score by the vendor: 6.0 (AV:N/AC:L/AU:N/C:P/I:P/A:P) -- Remotely Exploitable: Yes -- Authentication Required: Yes ------------------------------------------------------------------------ 4. Solution ------------------------------------------------------------------------ Please apply the security patch [SAP Note 1691744] supplied by the vendor. More information can be found at vendor's site: https://service.sap.com/sap/support/notes/1691744 ------------------------------------------------------------------------ About ESNC ------------------------------------------------------------------------ ESNC GmbH, Germany is a company specialized in SAP security audit, SAP penetration testing, ABAP security review and SAP vulnerability assessment services. It's flagship product ESNC Security Suite is used by many large enterprises for vulnerability scanning their SAP ABAP and Java systems, running ABAP code security reviews, enforcing SAP security baselines and managing compliance. For more information about our products and services, please visit our web page at www.esnc.de

Referencje:

https://service.sap.com/sap/support/notes/1691744


Vote for this issue:
50%
50%


 

Thanks for you vote!


 

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.


(*) - required fields.  
{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1
{{ x.comment }}

Copyright 2024, cxsecurity.com

 

Back to Top