Security Vulnerability in Self-Registration and Profile Modification in NetWeaver AS Java

CVE-2024-27899

What is CVE-2024-27899?

A vulnerability exists within the User Admin Application of SAP's NetWeaver AS Java that fails to enforce adequate security measures for newly defined security answers during self-registration and profile modifications. This oversight presents an opportunity for attackers to exploit the system, potentially compromising user confidentiality, and posing a risk to integrity and availability. Users are advised to review security settings and apply necessary updates to mitigate these risks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

News Articles

prophaze.com

CVE-2024-27899

CVE-2024-27899 : SAP NETWEAVER AS JAVA USER MANAGEMENT ENGINE 7.50 USER ADMIN APPLICATION PASSWORD RECOVERY - Cloud WAF

CVE-2024-27899 : Self-Registration and Modify your own profile in User Admin Application of NetWeaver AS Java does not enforce proper security requirements for the content of the newly defined security answer.

References