Under certain conditions SAP NetWeaver Application Server for Java (Startup Framework), versions 7.21, 7.22, 7.45, 7.49, and 7.53, allows an attacker to access information which would otherwise be restricted.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Netweaver_application_server_java | Sap | 7.21 (including) | 7.21 (including) |
| Netweaver_application_server_java | Sap | 7.22 (including) | 7.22 (including) |
| Netweaver_application_server_java | Sap | 7.45 (including) | 7.45 (including) |
| Netweaver_application_server_java | Sap | 7.49 (including) | 7.49 (including) |
| Netweaver_application_server_java | Sap | 7.53 (including) | 7.53 (including) |
References
- http://www.securityfocus.com/bid/109069
- https://launchpad.support.sap.com/#/notes/2738791
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=523994575
- http://www.securityfocus.com/bid/109069
- https://launchpad.support.sap.com/#/notes/2738791
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=523994575