Under certain conditions SAP Gateway of ABAP Application Server (fixed in SAP_GWFND 7.5, 7.51, 7.52, 7.53; SAP_BASIS 7.5) allows an attacker to access information which would otherwise be restricted.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Netweaver | Sap | 7.5 (including) | 7.5 (including) |
| Netweaver | Sap | 7.51 (including) | 7.51 (including) |
| Netweaver | Sap | 7.52 (including) | 7.52 (including) |
| Netweaver | Sap | 7.53 (including) | 7.53 (including) |
References
- http://www.securityfocus.com/bid/106471
- https://launchpad.support.sap.com/#/notes/2723142
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=509151985
- http://www.securityfocus.com/bid/106471
- https://launchpad.support.sap.com/#/notes/2723142
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=509151985