PT-2019-4586
CVE-2019-0327
·
تاريخ النشر
2019-07-09
·
تاريخ التحديث
2019-07-18
الوصف من
CVSS 2.0
9.0
عاليةالمقاييسAV:N/AC:L/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
SAP NetWeaver for Java Application Server - Web Container versions 7.1 through 7.5
Description
The issue allows an attacker to upload files, including script files, without proper file format validation. This can be exploited by a remote attacker to upload malicious files.
Recommendations
For versions 7.1 through 7.5, consider implementing proper file format validation to prevent the upload of malicious files. As a temporary workaround, restrict access to the file upload functionality until a proper fix is applied.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾