Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Code Injection Vulnerability in SAP Landscape Transformation (Analysis Platform)
Vulnerability Description
SAP Landscape Transformation (SLT) allows an attacker with user privileges to exploit a vulnerability in the function module exposed via RFC. This flaw enables the injection of arbitrary ABAP code into the system, bypassing essential authorization checks. This vulnerability effectively functions as a backdoor, creating the risk of full system compromise, undermining the confidentiality, integrity and availability of the system.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Vulnerability Type
对生成代码的控制不恰当(代码注入)
Vulnerability Title
SAP Landscape Transformation 代码注入漏洞
Vulnerability Description
SAP Landscape Transformation是德国思爱普（SAP）公司的一个用于系统数据迁移与整合的工具。 SAP Landscape Transformation (SLT)存在代码注入漏洞，该漏洞源于可通过RFC注入任意ABAP代码。
CVSS Information
N/A
Vulnerability Type
N/A