SAP NetWeaver SAPHostControl Service Command Injection Vulnerability
Publish Date: 21 Juli 2015
Schweregrad:: Hoch
Hinweisdatum: 21 Juli 2015
Beschreibung
A vulnerability has been reported in SAP NetWeaver, which can be exploited by malicious people to compromise a vulnerable system.The vulnerability is caused due to missing input validation in SAPHostControl Service and can be exploited to inject arbitrary commands via the SOAP management interface.
Trend Micro Lösungen
Apply associated Trend Micro DPI Rules.
Lösungen
Trend Micro Deep Security DPI Rule Number: 1005176
Trend Micro Deep Security DPI Rule Name: 1005176 - SAP NetWeaver SAPHostControl Service Command Injection Vulnerability
Betroffene Software und Version:
- SAP NetWeaver