Exploit for HTTP Request Smuggling in Sap Content_Server

🗓️ 02 Apr 2022 16:12:56Reported by asurti6783Type

Exploit for HTTP Request Smuggling in SAP Content Server, SAP-memory-pipes-desynchronization-vulnerability-MPI-CVE-2022-22536. Vulnerability allows unauthenticated attacker to prepend victim's request with arbitrary data, leading to compromise of system Confidentiality, Integrity, and Availability. Attacker abuses desynchronization in SAP application server to poison intermediary web caches and impersonate victims, impacting business criticality. Verification can be done using Burpsuite or python scripts such as ICMAD_scanner.py and CVE-2022-22536.py

Reporter	Title	Published	Views	Family All 37
GithubExploit	Exploit for HTTP Request Smuggling in Sap Content_Server	31 Oct 202519:02	–	githubexploit
GithubExploit	Exploit for HTTP Request Smuggling in Sap Content_Server	15 Feb 202209:22	–	githubexploit
GithubExploit	Exploit for HTTP Request Smuggling in Sap Content_Server	1 Apr 202522:16	–	githubexploit
GithubExploit	Exploit for HTTP Request Smuggling in Sap Content_Server	15 Feb 202209:22	–	githubexploit
GithubExploit	Exploit for HTTP Request Smuggling in Sap Content_Server	31 Oct 202519:02	–	githubexploit
ICS	2022 Top Routinely Exploited Vulnerabilities	3 Aug 202312:00	–	ics
ATTACKERKB	CVE-2022-22536	9 Feb 202223:15	–	attackerkb
Information Security Automation	August 2023: GitHub PoCs, Vulristics, Qualys First-Party, Tenable ExposureAI, SC Awards and Rapid7, Anglo-Saxon list, MS Patch Tuesday, WinRAR, Juniper	30 Aug 202316:15	–	avleonov
BDU FSTEC	The vulnerabilities of the SAP NetWeaver software integration platform, the SAP Content Server content server, and the SAP Web Dispatcher web dispatcher are related to deficiencies in HTTP request processing. This allows attackers to inject arbitrary code.	1 Mar 202200:00	–	bdu_fstec
Circl	CVE-2022-22536	10 Feb 202202:19	–	circl