Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
SAP Web Dispatcher versions - 7.49, 7.53, 7.77, 7.81, KRNL64NUC - 7.22, 7.22EXT, 7.49, KRNL64UC -7.22, 7.22EXT, 7.49, 7.53, KERNEL - 7.22, 7.49, 7.53, 7.77, 7.81, 7.83 processes allow an unauthenticated attacker to submit a malicious crafted request over a network to a front-end server which may, over several attempts, result in a back-end server confusing the boundaries of malicious and legitimate messages. This can result in the back-end server executing a malicious payload which can be used to read or modify any information on the server or consume server resources making it temporarily unavailable.
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:L
Vulnerability Type
HTTP请求的解释不一致性(HTTP请求私运)
Vulnerability Title
SAP Web dispatcher 环境问题漏洞
Vulnerability Description
SAP Web dispatcher是德国思爱普（SAP）公司的Load Balancing 的核心组件，支持负载均衡，提供反向代理的功能，使得外网用户可以访问到内部应用。 SAP Web Dispatcher存在安全漏洞，该漏洞允许攻击者通过网络向前端服务器提交恶意制作的请求，这可能会在多次尝试后导致后端服务器混淆恶意和合法消息的边界，进而导致后端服务器执行恶意负载，该负载可用于读取或修改服务器上的任何信息或消耗服务器资源使其暂时不可用。以下产品和版本受到影响：SAP Web Dispatcher ve
CVSS Information
N/A
Vulnerability Type
N/A