PT-2019-4586

CVE-2019-0327

·

Publicado

2019-07-09

·

Atualizado

2019-07-18

Descrição por

CVSS 2.0
9.0
Alta
MétricasAV:N/AC:L/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions SAP NetWeaver for Java Application Server - Web Container versions 7.1 through 7.5
Description The issue allows an attacker to upload files, including script files, without proper file format validation. This can be exploited by a remote attacker to upload malicious files.
Recommendations For versions 7.1 through 7.5, consider implementing proper file format validation to prevent the upload of malicious files. As a temporary workaround, restrict access to the file upload functionality until a proper fix is applied.
Explorabilidade
Correção
Impactos
Fornecedores
Produtos afetados
Identificadores relacionados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾