SAP NetWeaver ADBC Demo Programs Remote Authorization Bypass Vulnerability

SAP NetWeaver is prone to an authorization-bypass vulnerability.

Attackers can exploit this issue to gain unauthorized access and obtain sensitive information or elevate privileges. This may aid in further attacks.

Information

Bugtraq ID: 97568
Class: Input Validation Error
CVE:
Remote: Yes
Local: No
Published: Apr 11 2017 12:00AM
Updated: Apr 14 2017 12:04AM
Credit: The vendor reported this issue.
Vulnerable: SAP NetWeaver 0

Not Vulnerable:

References:

• SAP Homepage (SAP)
  
• SAP Security Note 2423486 (SAP)
  
• SAP Security Patch Day â?? April 2017 (SAP)
  

Source: www.securityfocus.com