SAP Knowledge Base Article - Preview

3808931 - ACTA-260828-851 – Apache Log4j2 Flaw Lets Attackers Bypass Security Checks and Execute Remote Code

Symptom

  • Security report ACTA-260828-851 – Apache Log4j2 Flaw Lets Attackers Bypass Security Checks and Execute Remote Code
  • Does this impact SuccessFactors?


Read more...

Environment

  • SAP SuccessFactors HCM Suite

Keywords

Apache Log4j2, deserialization, allow list bypass, FilteredObjectInputStream, MarshalledObject, java.rmi, security inquiry, remote code, RCE, CVE, CVSS, not impacted, version validation, product security, vulnerability assessment , KBA , LOD-SF-PLT-PSI , Product Security Inquiries , Problem

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.