Due to a Protection Mechanism Failure in SAP NetWeaver Application Server for ABAP and ABAP Platform, a developer can bypass the configured malware scanner API because of a programming error. This leads to a low impact on the applications confidentiality, integrity, and availability.
Weakness
The product does not use or incorrectly uses a protection mechanism that provides sufficient defense against directed attacks against the product.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Sap_basis | Sap | 700 (including) | 700 (including) |
| Sap_basis | Sap | 701 (including) | 701 (including) |
| Sap_basis | Sap | 702 (including) | 702 (including) |
| Sap_basis | Sap | 731 (including) | 731 (including) |
| Sap_basis | Sap | 740 (including) | 740 (including) |
| Sap_basis | Sap | 750 (including) | 750 (including) |
| Sap_basis | Sap | 751 (including) | 751 (including) |
| Sap_basis | Sap | 752 (including) | 752 (including) |
| Sap_basis | Sap | 753 (including) | 753 (including) |
| Sap_basis | Sap | 754 (including) | 754 (including) |
| Sap_basis | Sap | 755 (including) | 755 (including) |
| Sap_basis | Sap | 756 (including) | 756 (including) |
| Sap_basis | Sap | 757 (including) | 757 (including) |
| Sap_basis | Sap | 758 (including) | 758 (including) |
| Sap_basis | Sap | 795 (including) | 795 (including) |
| Sap_basis | Sap | 796 (including) | 796 (including) |
Related Attack Patterns
- https://cwe.mitre.org/data/definitions/1.html
- https://cwe.mitre.org/data/definitions/107.html
- https://cwe.mitre.org/data/definitions/127.html
- https://cwe.mitre.org/data/definitions/17.html
- https://cwe.mitre.org/data/definitions/20.html
- https://cwe.mitre.org/data/definitions/22.html
- https://cwe.mitre.org/data/definitions/237.html
- https://cwe.mitre.org/data/definitions/36.html
- https://cwe.mitre.org/data/definitions/477.html
- https://cwe.mitre.org/data/definitions/480.html
- https://cwe.mitre.org/data/definitions/51.html
- https://cwe.mitre.org/data/definitions/57.html
- https://cwe.mitre.org/data/definitions/59.html
- https://cwe.mitre.org/data/definitions/65.html
- https://cwe.mitre.org/data/definitions/668.html
- https://cwe.mitre.org/data/definitions/74.html
- https://cwe.mitre.org/data/definitions/87.html