CVE-2022-41272 PoC — SAP NetWeaver Process Integration 安全漏洞

Description

Improper access control in SAP NetWeaver Process Integration

介绍

# CVE-2022-41272

On this repository, we will briefly write information about the CVE-2022-41272 vulnerability.

The vulnerability exists on the SAP P4 service that runs on the 5NN04 port. Where NN is an instance number, that can be from 00-99.

There are remote call functions that an attacker can call without any authentication. 

In the following image, you can see the patch released by SAP. 
![image](https://user-images.githubusercontent.com/7976421/207416778-0e20c035-7182-4482-b266-923c4c5f7999.png)

The PoC is ready and deployed to the RedRays Security Platform. 

PS. You can star and start watching the repository, and when we open the PoC, you will receive the notification. 

[link to original twitt](https://twitter.com/vah_13/status/1602620606280859648)

文件快照

备注