PT-2019-4586
CVE-2019-0327
·
Publicado
2019-07-09
·
Atualizado
2019-07-18
Descrição por
CVSS 2.0
9.0
AltaMétricasAV:N/AC:L/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
SAP NetWeaver for Java Application Server - Web Container versions 7.1 through 7.5
Description
The issue allows an attacker to upload files, including script files, without proper file format validation. This can be exploited by a remote attacker to upload malicious files.
Recommendations
For versions 7.1 through 7.5, consider implementing proper file format validation to prevent the upload of malicious files. As a temporary workaround, restrict access to the file upload functionality until a proper fix is applied.
Explorabilidade
Correção
Impactos
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾