SAP Knowledge Base Article - Preview

3441082 - Q&A for SAP Security Note - 3433192

Symptom

SAP NetWeaver Administrator Log Viewer plug-in allows an attacker with high privileges to upload potentially dangerous files which leads to command injection causing high impact on the confidentiality, integrity and availability of the application

SAP Security Note 3433192 has been released on 07.03.2024 . This KBA helps to answer additional questions about the security note.


Read more...

Environment

SAP NetWeaver 7.5

Product

SAP NetWeaver Application Server for Java all versions

Keywords

Command Injection, Log Viewer,CVE-2024-22127,Code Injection vulnerability , KBA , BC-JAS-ADM-LOG , Logging , BC-JAS-SEC , Security, User Management , Problem

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.