vulnerability bulletin 12158

SAP J2EE Engine Core Services: file access

Synthesis of the vulnerability

An attacker can use a vulnerability of SAP J2EE Engine Core Services, in order to read or to alter files with privileges of the SIDADM user.
Impacted products: SAP ERP, NetWeaver.
Severity: 3/4.
Creation date: 15/11/2012.
Revision date: 25/02/2013.
Identifiers: 1682613, BID-58175, DOC-8218, ONAPSIS-2013-004, VIGILANCE-VUL-12158.

Description of the vulnerability

An attacker can use a vulnerability of SAP J2EE Engine Core Services, in order to read or to alter files with privileges of the SIDADM user.

Technical details are unknown.
Complete Vigil@nce bulletin.... (free access)

Share this bulletin

          

Computer vulnerabilities tracking service

Vigil@nce provides a networks vulnerabilities bulletin. The technology watch team tracks security threats targeting the computer system. Each administrator can customize the list of products for which he wants to receive vulnerability alerts. The Vigil@nce team tracks computer vulnerabilities impacting systems and applications.