CVE-2022-22536—SAP Multiple Products HTTP Request Smuggling Vulnerability

漏洞名称

SAP Multiple Products HTTP Request Smuggling Vulnerability

描述

SAP NetWeaver Application Server ABAP, SAP NetWeaver Application Server Java, ABAP Platform, SAP Content Server and SAP Web Dispatcher allow HTTP request smuggling. An unauthenticated attacker can prepend a victim's request with arbitrary data, allowing for function execution impersonating the victim or poisoning intermediary Web caches.

已知用于勒索软件活动吗？

勒索软件状态：

Unknown

采集行动

Apply updates per vendor instructions.

其他说明

• SAP users must have an account in order to login and access the patch. https://accounts.sap.com/saml2/idp/sso
• https://nvd.nist.gov/vuln/detail/CVE-2022-22536

相关 CWE

• CWE-444