Description (CNA)
SAP NetWeaver AS ABAP, versions - KRNL32NUC - 7.22,7.22EXT, KRNL32UC - 7.22,7.22EXT, KRNL64NUC - 7.22,7.22EXT,7.49, KRNL64UC - 8.04,7.22,7.22EXT,7.49,7.53,7.73, KERNEL - 7.22,8.04,7.49,7.53,7.73,7.77,7.81,7.82,7.83,7.84, allows an unauthorized attacker to insert cleartext commands due to improper restriction of I/O buffering into encrypted SMTP sessions over the network which can partially impact the integrity of the application.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| SAP SE / SAP NetWeaver AS ABAP | affected < KRNL32NUC - 7.22; affected < 7.22EXT; affected < KRNL32UC - 7.22; affected < KRNL64NUC - 7.22; affected < 7.49; affected < KRNL64UC - 8.04; affected < 7.22; affected < 7.53; affected < 7.73; affected < KERNEL - 7.22; affected < 8.04; affected < 7.77; affected < 7.81; affected < 7.82; affected < 7.83; affected < 7.84 |
CWE
No CWE identifiers supplied.
References
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=578125999
- https://launchpad.support.sap.com/#/notes/3030604
ADP enrichment
No English description supplied.