Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
SAP NetWeaver AS JAVA (P2P Cluster Communication), versions - 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, allows arbitrary connections from processes because of missing authentication check, that are outside the cluster and even outside the network segment dedicated for the internal cluster communication. As result, an unauthenticated attacker can invoke certain functions that would otherwise be restricted to system administrators only, including access to system administration functions or shutting down the system completely.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
SAP Netweaver 授权问题漏洞
Vulnerability Description
SAP Netweaver是德国思爱普（SAP）公司的一套面向服务的集成化应用平台。该平台主要为SAP应用程序提供开发和运行环境。 SAP NetWeaver 存在安全漏洞，该漏洞源于缺少身份验证检查，允许在集群之外，甚至在专门用于内部集群通信的网络权限之外的进程进行任意连接。以下产品及版本受到影响：7.11,7.20,7.30,7.31,7.40,7.50。
CVSS Information
N/A
Vulnerability Type
N/A