Sherpa Connector Service 2020.2.20328.2050 Unquoted Service Path

Exploit Title: Sherpa Connector Service v2020.2.20328.2050 - Unquoted Service Path Exploit Author: Manthan Chhabra netsectuna, Harshit fumenoid Version: 2020.2.20328.2050 Date: 02/04/2022 Vendor Homepage: http://gimmal.com/ Vulnerability Type: Unquoted Service Path Tested on: Windows 10 CVE:...

The vulnerability of the JMS Connector Service server in SAP NetWeaver Java Application Server allows attackers to circumvent existing security restrictions or execute arbitrary code.

The vulnerability of the JMS Connector Service server in SAP NetWeaver Java Application Server applications is related to deficiencies in the authentication mechanism. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions or execute arbitrary code by...

Authorization

SAP NetWeaver Application Server Java JMS Connector Service - versions 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not perform necessary authorization checks for user privileges...

CVE-2021-37535

CVE-2021-37535 affects SAP NetWeaver Application Server Java, specifically the JMS Connector Service . Affected versions: 7.11, 7.20, 7.30, 7.31, 7.40, 7.50 . Root cause described in sources as missing/incorrect authorization checks for user privileges, enabling a remote attacker to bypass author...

PT-2021-4347 · Sap · Sap Netweaver Application Server Java

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver Application Server Java JMS Connector Service versions 7.11, 7.20, 7.30, 7.31, 7.40, 7.50 Description: The issue is related to the JMS Connector Service in SAP NetWeaver Java Application Server, where there are shortcomings in t...