Information Disclosure Risk in SAP NetWeaver Master Data Management on Windows

CVE-2021-21469

Summary

In SAP NetWeaver Master Data Management (MDM) running on Windows, insufficient review of security guidelines can create vulnerabilities. If security protections, such as MDS server password enforcement and proper network and OS configurations, are lacking, malicious external users may attempt to configure unauthorized paths in the MDS server settings. This situation can lead to serious threats, including the potential for SMB relay attacks, ultimately resulting in sensitive information being exposed.

References