Vulnerability CVE-2016-4551
Published: 2016-10-05

Description:
The (1) SAP_BASIS and (2) SAP_ABA components 7.00 SP Level 0031 in SAP NetWeaver 2004s might allow remote attackers to spoof IP addresses written to the Security Audit Log via vectors related to the network landscape, aka SAP Security Note 2190621.

See advisories in our WLB2 database:
Topic
Author
Date
Low
SAP Netweaver 2004s Invalid Address Logging
Sergio Abraham
04.10.2016

Type:

CWE-778

CVSS2 => (AV:N/AC:L/Au:N/C:N/I:P/A:N)

CVSS Base Score
Impact Subscore
Exploitability Subscore
5/10
2.9/10
10/10
Exploit range
Attack complexity
Authentication
Remote
Low
No required
Confidentiality impact
Integrity impact
Availability impact
None
Partial
None
Affected software
SAP -> Netweaver 
SAP -> Sap aba 
SAP -> Sap basis 

 References:
http://seclists.org/fulldisclosure/2016/Oct/3
https://www.onapsis.com/research/security-advisories/sap-security-audit-log-invalid-address-logging
Copyright 2024, cxsecurity.com

 

Back to Top