IP filter vulnerability in ABAP Platform and SAP Web Dispatcher
CVE-2023-29108

5.3MEDIUM

Key Information:

Vendor
SAP
Status
ABAP Platform and SAP Web Dispatcher
Vendor
CVE Published:
11 April 2023

Summary

The IP filter in ABAP Platform and SAP Web Dispatcher - versions WEBDISP 7.85, 7.89, KERNEL 7.85, 7.89, 7.91, may be vulnerable by erroneous IP netmask handling. This may enable access to backend applications from unwanted sources.

Affected Version(s)

ABAP Platform and SAP Web Dispatcher WEBDISP 7.85

ABAP Platform and SAP Web Dispatcher WEBDISP 7.89

ABAP Platform and SAP Web Dispatcher KERNEL 7.85

References

https://launchpad.support.sap.com/#/notes/3315312
https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-...

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.