PT-2022-19728
CVE-2022-29615
·
تاريخ النشر
2022-06-14
·
تاريخ التحديث
2022-06-24
الوصف من
CVSS 2.0
3.6
منخفضةالمقاييسAV:L/AC:L/Au:N/C:P/I:P/A:N
Name of the Vulnerable Software and Affected Versions
SAP NetWeaver Developer Studio version 7.50
Description
The issue is related to the logging framework log4j in version 1.x, which is part of Eclipse and used by SAP NetWeaver Developer Studio. This could have a low impact on the application's confidentiality and integrity due to the vulnerabilities associated with log4j version 1.x.
Recommendations
For SAP NetWeaver Developer Studio version 7.50, consider updating the log4j component to a version that is not affected by the vulnerabilities. As a temporary workaround, restrict the use of the log4j logging framework until a patch is available.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾