PT-2021-22905
CVE-2021-40499
·
تاريخ النشر
2021-10-12
·
تاريخ التحديث
2021-10-18
الوصف من
CVSS 3.1
9.8
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
SAP NetWeaver Application Server for ABAP versions 7.70, 7.70 PI, 7.70 BYD
Description
The client-side printing services SAP Cloud Print Manager and SAPSprint allow an attacker to inject code that can be executed by the application, potentially controlling the behavior of the application.
Recommendations
For versions 7.70, 7.70 PI, 7.70 BYD, update to a version that includes a fix for this issue to prevent code injection attacks.
As a temporary workaround, consider restricting access to the client-side printing services to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾