The Telnet interface in the SAP J2EE Engine Core (SAP-JEECOR) 6.40 through 7.02, and Server Core (SERVERCORE) 7.10 through 7.30 allows remote authenticated users to bypass a security check and conduct SMB relay attacks via unspecified vectors.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| J2ee_engine_core | Sap | 6.40 (including) | 6.40 (including) |
| J2ee_engine_core | Sap | 7.00 (including) | 7.00 (including) |
| J2ee_engine_core | Sap | 7.01 (including) | 7.01 (including) |
| J2ee_engine_core | Sap | 7.02 (including) | 7.02 (including) |