Gravité: : Élevé
  Date du conseil: 21 juillet 2015

  Description

A vulnerability has been reported in SAP NetWeaver, which can be exploited by malicious people to compromise a vulnerable system.The vulnerability is caused due to missing input validation in SAPHostControl Service and can be exploited to inject arbitrary commands via the SOAP management interface.

  Information Exposure Rating:

Apply associated Trend Micro DPI Rules.

  Solutions

  Trend Micro Deep Security DPI Rule Number: 1005176
  Trend Micro Deep Security DPI Rule Name: 1005176 - SAP NetWeaver SAPHostControl Service Command Injection Vulnerability

  Affected software and version:

  • SAP NetWeaver