Description (CNA)
In certain conditions, SAP NetWeaver Application Server ABAP allows an authenticated attacker to craft a Remote Function Call (RFC) request to restricted destinations, which can be used to expose credentials for a remote service. These credentials can then be further exploited to completely compromise the remote service, potentially resulting in a significant impact on the confidentiality, integrity, and availability of the application.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| SAP_SE / SAP NetWeaver Application Server ABAP | affected KRNL64NUC 7.22; affected 7.22EXT; affected KRNL64UC 7.22; affected 7.53; affected KERNEL 7.22; affected 7.54; affected 7.77; affected 7.89; affected 7.93 |
CWE
CWE-914
References
ADP enrichment
No English description supplied.
No references supplied.