ID THREATPOST:5A717CA5CEE8F6A187DFCCA59E90466A Type threatpost Reporter Lisa Vaas Modified 2021-08-11T15:27:02
Description
SAP has released 19 new and updated security patches, three of them rated as “HotNews” critical and six as high-priority.
“HotNews” is the severity rating that SAP gives to critical vulnerabilities. Two of this month’s sizzlers have a CVSS score of 9.9 and affect SAP Business One and SAP NetWeaver Development Infrastructure.
SAP applications help organizations manage critical business processes – including enterprise resource planning (ERP), product lifecycle management, customer relationship management (CRM) and supply-chain management.
One of the 9.9ers is CVE-2021-33698, an unrestricted file-upload issue affecting SAP Business One, which is the German company’s business management software for small and medium-sized enterprises. The vulnerability allows an attacker to upload files, including malicious scripts, to the server.
According to Thomas Fritsch, an SAP security researcher at enterprise security firm Onapsis, the only reason it wasn’t given the top CVSS rating of 10 is because it needs a minimal set of authorizations.
In his patch Tuesday writeup, Fritsch said that fortunately for those customers who can’t immediately apply the related hotfix, there’s a workaround: “Simply deactivate the affected functionality,” he instructed. Of course, that’s just a quick fix. As always, SAP is stressing that the workaround be considered a temporary fix and not a permanent solution.
SAP described the second critical security bug, CVE-2021-33690, as a server-side request forgery (SSRF) affecting NetWeaver Development Infrastructure (SAP NWDI) in a servlet of the Component Build Service.
Onapsis said that the servlet was exposed to the outside world, “allowing attackers to perform proxy attacks by sending crafted queries.” According to Fritsch, SAP warned that the severity of the flaw depends on whether users are running NWDI on the intranet or internet. It’s bad news for those who are running it on the internet, SAP has emphasized, given that it “could completely compromise sensitive data residing on the server, and impact its availability,” the company reportedly said in its note.
As far as the third HotNews vulnerability goes – CVE-2021-33701 – the flaw is a SQL injection in the SAP NZDT (Near Zero Downtime Technology) service used by S/4HANA and the DMIS mobile plug-in. Its CVSS severity rating is 9.1.
“The tool is used by SAP’s corresponding NZDT service for time-optimized system upgrades and system conversions,” Fritsch explained. “When using the NZDT service, the maintenance is performed on a clone of the production system. All changes are recorded and transferred to the clone after the maintenance tasks are completed. During the final downtime, only a few activities are executed, including a switch of the production to the new system (clone).”
Again, there’s a workaround available for customers who’ve activated the Unified Connectivity (UCON) runtime check, he wrote: Don’t assign the used remote-enabled function module to any communication assembly in UCON.
Four High-Severity Bugs
Onapsis gave a shout-out to Yvan Genuer, from the Onapsis Research Labs, who collaborated with SAP to fix four vulnerabilities in SAP Enterprise Portal.
One was CVE-2021-33702, a cross-site scripting (XSS) vulnerability in SAP NetWeaver Enterprise Portal that was caused by one of the portal’s servlets and given a rating of CVSS 8.3. It involves insufficient sanitization that allows for injection of JavaScript into the corresponding web page: an issue that could lead to a victim navigating to an infected servlet and triggering a vulnerable script to execute in their browser. The impact is high, but successful exploitation would be “highly complex” and would require user interaction, Fitsch explained, which are conditions that led to its lower CVSS score.
The quartet of high-severity patches includes a second XSS vulnerability, CVE-2021-33703, similarly found in another servlet of SAP NetWeaver Enterprise Portal and also rated CVSS 8.3.
The third high-priority fix is CVE-2021-33705. This one addresses a server-side request forgery (SSRF) vulnerability in one of the design-time components of SAP NetWeaver Enterprise Portal that would allow an unauthenticated attacker to craft a malicious URL that could send any type of request – POST or GET, for example – to any internal or external server were a user to click on it.
The fourth hole that Onapsis worked with SAP to seal up – CVE-2021-33707 – was tagged with a CVSS score of 6.1. It concerns a URL-redirection bug in SAP Knowledge Management that would allow remote attackers to “redirect users to arbitrary websites and conduct phishing attacks via a URL stored in a component,” Fitsch detailed: A scenario that would give attackers the ability “to compromise the user’s confidentiality and integrity.”
Other critical vulnerabilities covered on Tuesday were an authentication issue affecting SAP systems accessed through a Web Dispatcher, a task hijacking issue in the Fiori Client mobile app for Android and a missing authentication flaw in SAP Business One.
Last Month = Calm, This Month = Storm
Given the nine critical patches, Fritsch dubbed last month’s light SAP Patch Tuesday the “calm before the storm.” In fact, he said, Tuesday’s raft of patches have earned August the dubious honor of being “the most noteworthy SAP Patch Day this year” for customers, he wrote.
“The small group of SAP applications that are affected by a CVSS 9.9 vulnerability in 2021 is now extended with SAP Business One and SAP NetWeaver Development Infrastructure,” Fritsch noted.
Word of caution to SAP Enterprise Portal customers in particular, he said, given the four patches released for the app, three of them rated high priority.
Critical Flaws Weaponized in Less Than 72 hours
Enterprises will hopefully jump on the patches with utmost speed, given how fast SAP bugs are weaponized. An April threat intelligence report from Onapsis and SAP found that critical SAP vulnerabilities are turned into exploits “in less than 72 hours of a patch release.” It’s even worse for new, unprotected SAP apps provisioned in cloud environments: They’re being discovered and compromised in less than three hours, according to the alert.
“Threat actors are active, capable and widespread,” the report advised, citing evidence of more than 300 automated exploitations leveraging seven SAP-specific attack vectors and 100+ hands-on-keyboard sessions from a wide range of threat actors. The companies found “clear evidence of sophisticated domain knowledge, including the implementation of SAP patches post-compromise.”
Adversaries were carrying out a range of attacks, according to Onapsis and SAP, including theft of sensitive data, financial fraud, disruption of mission-critical business processes and other operational disruptions, and delivery of ransomware and other malware.
Worried about where the next attack is coming from? We’ve got your back. REGISTER NOW for our upcoming live webinar, How to Think Like a Threat Actor, in partnership with Uptycs on Aug. 17 at 11 AM EST and find out precisely where attackers are targeting you and how to get there first. Join host Becky Bracken and Uptycs researchers Amit Malik and Ashwin Vamshi on Aug. 17 at 11AM EST for this LIVE discussion.
{"id": "THREATPOST:5A717CA5CEE8F6A187DFCCA59E90466A", "type": "threatpost", "bulletinFamily": "info", "title": "SAP Patches Nine Critical & High-Severity Bugs", "description": "SAP has released 19 new and updated [security patches](<https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=582222806>), three of them rated as \u201cHotNews\u201d critical and six as high-priority.\n\n\u201cHotNews\u201d is the severity rating that SAP gives to critical vulnerabilities. Two of this month\u2019s sizzlers have a CVSS score of 9.9 and affect SAP Business One and SAP NetWeaver Development Infrastructure.\n\nSAP applications help organizations manage critical business processes \u2013 including enterprise resource planning (ERP), product lifecycle management, customer relationship management (CRM) and supply-chain management.\n\n[](<https://threatpost.com/infosec-insider-subscription-page/?utm_source=ART&utm_medium=ART&utm_campaign=InfosecInsiders_Newsletter_Promo/>)\n\nOne of the 9.9ers is CVE-2021-33698, an unrestricted file-upload issue affecting SAP Business One, which is the German company\u2019s business management software for small and medium-sized enterprises. The vulnerability allows an attacker to upload files, including malicious scripts, to the server.\n\nAccording to Thomas Fritsch, an SAP security researcher at enterprise security firm Onapsis, the only reason it wasn\u2019t given the top CVSS rating of 10 is because it needs a minimal set of authorizations.\n\nIn his patch Tuesday [writeup](<https://onapsis.com/blog/sap-security-patch-day-august-2021>), Fritsch said that fortunately for those customers who can\u2019t immediately apply the related hotfix, there\u2019s a workaround: \u201cSimply deactivate the affected functionality,\u201d he instructed. Of course, that\u2019s just a quick fix. As always, SAP is stressing that the workaround be considered a temporary fix and not a permanent solution.\n\nSAP described the second critical security bug, CVE-2021-33690, as a server-side request forgery (SSRF) affecting NetWeaver Development Infrastructure (SAP NWDI) in a servlet of the Component Build Service.\n\nOnapsis said that the servlet was exposed to the outside world, \u201callowing attackers to perform proxy attacks by sending crafted queries.\u201d According to Fritsch, SAP warned that the severity of the flaw depends on whether users are running NWDI on the intranet or internet. It\u2019s bad news for those who are running it on the internet, SAP has emphasized, given that it \u201ccould completely compromise sensitive data residing on the server, and impact its availability,\u201d the company reportedly said in its note.\n\nAs far as the third HotNews vulnerability goes \u2013 CVE-2021-33701 \u2013 the flaw is a SQL injection in the SAP NZDT (Near Zero Downtime Technology) service used by S/4HANA and the DMIS mobile plug-in. Its CVSS severity rating is 9.1.\n\n\u201cThe tool is used by SAP\u2019s corresponding NZDT service for time-optimized system upgrades and system conversions,\u201d Fritsch explained. \u201cWhen using the NZDT service, the maintenance is performed on a clone of the production system. All changes are recorded and transferred to the clone after the maintenance tasks are completed. During the final downtime, only a few activities are executed, including a switch of the production to the new system (clone).\u201d\n\nAgain, there\u2019s a workaround available for customers who\u2019ve activated the Unified Connectivity (UCON) runtime check, he wrote: Don\u2019t assign the used remote-enabled function module to any communication assembly in UCON.\n\n## Four High-Severity Bugs\n\nOnapsis gave a shout-out to Yvan Genuer, from the Onapsis Research Labs, who collaborated with SAP to fix four vulnerabilities in SAP Enterprise Portal.\n\nOne was CVE-2021-33702, a cross-site scripting (XSS) vulnerability in SAP NetWeaver Enterprise Portal that was caused by one of the portal\u2019s servlets and given a rating of CVSS 8.3. It involves insufficient sanitization that allows for injection of JavaScript into the corresponding web page: an issue that could lead to a victim navigating to an infected servlet and triggering a vulnerable script to execute in their browser. The impact is high, but successful exploitation would be \u201chighly complex\u201d and would require user interaction, Fitsch explained, which are conditions that led to its lower CVSS score.\n\nThe quartet of high-severity patches includes a second XSS vulnerability, CVE-2021-33703, similarly found in another servlet of SAP NetWeaver Enterprise Portal and also rated CVSS 8.3.\n\nThe third high-priority fix is CVE-2021-33705. This one addresses a server-side request forgery (SSRF) vulnerability in one of the design-time components of SAP NetWeaver Enterprise Portal that would allow an unauthenticated attacker to craft a malicious URL that could send any type of request \u2013 POST or GET, for example \u2013 to any internal or external server were a user to click on it.\n\nThe fourth hole that Onapsis worked with SAP to seal up \u2013 CVE-2021-33707 \u2013 was tagged with a CVSS score of 6.1. It concerns a URL-redirection bug in SAP Knowledge Management that would allow remote attackers to \u201credirect users to arbitrary websites and conduct phishing attacks via a URL stored in a component,\u201d Fitsch detailed: A scenario that would give attackers the ability \u201cto compromise the user\u2019s confidentiality and integrity.\u201d\n\nOther critical vulnerabilities covered on Tuesday were an authentication issue affecting SAP systems accessed through a Web Dispatcher, a task hijacking issue in the Fiori Client mobile app for Android and a missing authentication flaw in SAP Business One.\n\n## Last Month = Calm, This Month = Storm\n\nGiven the nine critical patches, Fritsch dubbed [last month\u2019s light SAP Patch Tuesday](<https://onapsis.com/blog/sap-security-patch-day-july-2021-serious-vulnerabilities-sap-netweaver-java-fixed>) the \u201ccalm before the storm.\u201d In fact, he said, Tuesday\u2019s raft of patches have earned August the dubious honor of being \u201cthe most noteworthy SAP Patch Day this year\u201d for customers, he wrote.\n\n\u201cThe small group of SAP applications that are affected by a CVSS 9.9 vulnerability in 2021 is now extended with SAP Business One and SAP NetWeaver Development Infrastructure,\u201d Fritsch noted.\n\nWord of caution to SAP Enterprise Portal customers in particular, he said, given the four patches released for the app, three of them rated high priority.\n\n## Critical Flaws Weaponized in Less Than 72 hours\n\nEnterprises will hopefully jump on the patches with utmost speed, given how fast SAP bugs are weaponized. An April threat intelligence [report](<https://www.onapsis.com/active-cyberattacks-business-critical-sap-applications>) from Onapsis and SAP found that critical SAP vulnerabilities are turned into exploits \u201cin less than 72 hours of a patch release.\u201d It\u2019s even worse for new, unprotected SAP apps provisioned in cloud environments: They\u2019re being discovered and compromised in less than three hours, according to the alert.\n\n\u201cThreat actors are active, capable and widespread,\u201d the report advised, citing evidence of more than 300 automated exploitations leveraging seven SAP-specific attack vectors and 100+ hands-on-keyboard sessions from a wide range of threat actors. The companies found \u201cclear evidence of sophisticated domain knowledge, including the implementation of SAP patches post-compromise.\u201d\n\nAdversaries were [carrying out a range of attacks](<https://threatpost.com/sap-bugs-cyberattack-compromise/165265/>), according to Onapsis and SAP, including theft of sensitive data, financial fraud, disruption of mission-critical business processes and other operational disruptions, and delivery of ransomware and other malware.\n\n**Worried about where the next attack is coming from? We\u2019ve got your back. [REGISTER NOW](<https://threatpost.com/webinars/how-to-think-like-a-threat-actor/?utm_source=ART&utm_medium=ART&utm_campaign=August_Uptycs_Webinar>) for our upcoming live webinar, How to Think Like a Threat Actor, in partnership with Uptycs on Aug. 17 at 11 AM EST and find out precisely where attackers are targeting you and how to get there first. Join host Becky Bracken and Uptycs researchers Amit Malik and Ashwin Vamshi on [Aug. 17 at 11AM EST for this LIVE discussion](<https://threatpost.com/webinars/how-to-think-like-a-threat-actor/?utm_source=ART&utm_medium=ART&utm_campaign=August_Uptycs_Webinar>).**\n", "published": "2021-08-11T15:27:02", "modified": "2021-08-11T15:27:02", "cvss": {"score": 0.0, "vector": "NONE"}, "cvss2": {}, "cvss3": {}, "href": "https://threatpost.com/sap-patches-critical-bugs/168558/", "reporter": "Lisa Vaas", "references": ["https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=582222806", "https://threatpost.com/infosec-insider-subscription-page/?utm_source=ART&utm_medium=ART&utm_campaign=InfosecInsiders_Newsletter_Promo/", "https://onapsis.com/blog/sap-security-patch-day-august-2021", "https://onapsis.com/blog/sap-security-patch-day-july-2021-serious-vulnerabilities-sap-netweaver-java-fixed", "https://www.onapsis.com/active-cyberattacks-business-critical-sap-applications", "https://threatpost.com/sap-bugs-cyberattack-compromise/165265/", "https://threatpost.com/webinars/how-to-think-like-a-threat-actor/?utm_source=ART&utm_medium=ART&utm_campaign=August_Uptycs_Webinar", "https://threatpost.com/webinars/how-to-think-like-a-threat-actor/?utm_source=ART&utm_medium=ART&utm_campaign=August_Uptycs_Webinar"], "cvelist": ["CVE-2021-33690", "CVE-2021-33698", "CVE-2021-33701", "CVE-2021-33702", "CVE-2021-33703", "CVE-2021-33705", "CVE-2021-33707"], "immutableFields": [], "lastseen": "2021-08-11T19:53:36", "viewCount": 146, "enchantments": {"dependencies": {"references": [{"type": "cve", "idList": ["CVE-2021-33702", "CVE-2021-33690", "CVE-2021-33698", "CVE-2021-33701", "CVE-2021-33707", "CVE-2021-33705", "CVE-2021-33703"]}, {"type": "threatpost", "idList": ["THREATPOST:4CFA3A7AC21D83FC03B1B74B2DA261BD"]}], "modified": "2021-08-11T19:53:36", "rev": 2}, "score": {"value": 5.7, "vector": "NONE", "modified": "2021-08-11T19:53:36", "rev": 2}, "vulnersScore": 5.7}}
{"cve": [{"lastseen": "2021-08-18T19:54:31", "description": "SAP NetWeaver Knowledge Management allows remote attackers to redirect users to arbitrary websites and conduct phishing attacks via a URL stored in a component. This could enable the attacker to compromise the user's confidentiality and integrity.", "edition": 2, "cvss3": {}, "published": "2021-08-10T15:15:00", "title": "CVE-2021-33707", "type": "cve", "cwe": ["CWE-601"], "bulletinFamily": "NVD", "cvss2": {}, "cvelist": ["CVE-2021-33707"], "modified": "2021-08-17T20:17:00", "cpe": ["cpe:/a:sap:netweaver_knowledge_management:7.30", "cpe:/a:sap:netweaver_knowledge_management:7.31", "cpe:/a:sap:netweaver_knowledge_management:7.50", "cpe:/a:sap:netweaver_knowledge_management:7.40"], "id": "CVE-2021-33707", "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-33707", "cvss": {"score": 5.8, "vector": "AV:N/AC:M/Au:N/C:P/I:P/A:N"}, "cpe23": ["cpe:2.3:a:sap:netweaver_knowledge_management:7.50:*:*:*:*:*:*:*", "cpe:2.3:a:sap:netweaver_knowledge_management:7.31:*:*:*:*:*:*:*", "cpe:2.3:a:sap:netweaver_knowledge_management:7.40:*:*:*:*:*:*:*", "cpe:2.3:a:sap:netweaver_knowledge_management:7.30:*:*:*:*:*:*:*"]}, {"lastseen": "2021-08-18T19:54:31", "description": "Under certain conditions, NetWeaver Enterprise Portal, versions - 7.30, 7.31, 7.40, 7.50, does not sufficiently encode URL parameters. An attacker can craft a malicious link and send it to a victim. A successful attack results in Reflected Cross-Site Scripting (XSS) vulnerability.", "edition": 2, "cvss3": {}, "published": "2021-08-10T15:15:00", "title": "CVE-2021-33703", "type": "cve", "cwe": ["CWE-79"], "bulletinFamily": "NVD", "cvss2": {}, "cvelist": ["CVE-2021-33703"], "modified": "2021-08-17T19:34:00", "cpe": ["cpe:/a:sap:netweaver_enterprise_portal:7.50", "cpe:/a:sap:netweaver_enterprise_portal:7.40", "cpe:/a:sap:netweaver_enterprise_portal:7.31", "cpe:/a:sap:netweaver_enterprise_portal:7.30"], "id": "CVE-2021-33703", "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-33703", "cvss": {"score": 2.6, "vector": "AV:N/AC:H/Au:N/C:N/I:P/A:N"}, "cpe23": ["cpe:2.3:a:sap:netweaver_enterprise_portal:7.50:*:*:*:*:*:*:*", "cpe:2.3:a:sap:netweaver_enterprise_portal:7.31:*:*:*:*:*:*:*", "cpe:2.3:a:sap:netweaver_enterprise_portal:7.30:*:*:*:*:*:*:*", "cpe:2.3:a:sap:netweaver_enterprise_portal:7.40:*:*:*:*:*:*:*"]}, {"lastseen": "2021-08-18T19:54:31", "description": "Under certain conditions, NetWeaver Enterprise Portal, versions - 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not sufficiently encode report data. An attacker can craft malicious data and print it to the report. In a successful attack, a victim opens the report, and the malicious script gets executed in the victim's browser, resulting in a Stored Cross-Site Scripting (XSS) vulnerability.", "edition": 2, "cvss3": {}, "published": "2021-08-10T15:15:00", "title": "CVE-2021-33702", "type": "cve", "cwe": ["CWE-79"], "bulletinFamily": "NVD", "cvss2": {}, "cvelist": ["CVE-2021-33702"], "modified": "2021-08-17T20:27:00", "cpe": ["cpe:/a:sap:netweaver_enterprise_portal:7.11", "cpe:/a:sap:netweaver_enterprise_portal:7.10", "cpe:/a:sap:netweaver_enterprise_portal:7.20", "cpe:/a:sap:netweaver_enterprise_portal:7.50", "cpe:/a:sap:netweaver_enterprise_portal:7.40", "cpe:/a:sap:netweaver_enterprise_portal:7.31", "cpe:/a:sap:netweaver_enterprise_portal:7.30"], "id": "CVE-2021-33702", "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-33702", "cvss": {"score": 2.6, "vector": "AV:N/AC:H/Au:N/C:N/I:P/A:N"}, "cpe23": ["cpe:2.3:a:sap:netweaver_enterprise_portal:7.50:*:*:*:*:*:*:*", "cpe:2.3:a:sap:netweaver_enterprise_portal:7.20:*:*:*:*:*:*:*", "cpe:2.3:a:sap:netweaver_enterprise_portal:7.11:*:*:*:*:*:*:*", "cpe:2.3:a:sap:netweaver_enterprise_portal:7.31:*:*:*:*:*:*:*", "cpe:2.3:a:sap:netweaver_enterprise_portal:7.30:*:*:*:*:*:*:*", "cpe:2.3:a:sap:netweaver_enterprise_portal:7.10:*:*:*:*:*:*:*", "cpe:2.3:a:sap:netweaver_enterprise_portal:7.40:*:*:*:*:*:*:*"]}, {"lastseen": "2021-09-16T07:26:28", "description": "SAP Business One, version - 10.0, allows an attacker with business authorization to upload any files (including script files) without the proper file format validation.", "edition": 1, "cvss3": {}, "published": "2021-09-15T19:15:00", "title": "CVE-2021-33698", "type": "cve", "cwe": [], "bulletinFamily": "NVD", "cvss2": {}, "cvelist": ["CVE-2021-33698"], "modified": "2021-09-15T20:20:00", "cpe": [], "id": "CVE-2021-33698", "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-33698", "cvss": {"score": 0.0, "vector": "NONE"}, "cpe23": []}, {"lastseen": "2021-09-16T07:26:28", "description": "DMIS Mobile Plug-In or SAP S/4HANA, versions - DMIS 2011_1_620, 2011_1_640, 2011_1_700, 2011_1_710, 2011_1_730, 710, 2011_1_731, 710, 2011_1_752, 2020, SAPSCORE 125, S4CORE 102, 102, 103, 104, 105, allows an attacker with access to highly privileged account to execute manipulated query in NDZT tool to gain access to Superuser account, leading to SQL Injection vulnerability, that highly impacts systems Confidentiality, Integrity and Availability.", "edition": 1, "cvss3": {}, "published": "2021-09-15T19:15:00", "title": "CVE-2021-33701", "type": "cve", "cwe": [], "bulletinFamily": "NVD", "cvss2": {}, "cvelist": ["CVE-2021-33701"], "modified": "2021-09-15T20:20:00", "cpe": [], "id": "CVE-2021-33701", "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-33701", "cvss": {"score": 0.0, "vector": "NONE"}, "cpe23": []}, {"lastseen": "2021-09-16T07:26:28", "description": "The SAP NetWeaver Portal, versions - 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, component Iviews Editor contains a Server-Side Request Forgery (SSRF) vulnerability which allows an unauthenticated attacker to craft a malicious URL which when clicked by a user can make any type of request (e.g. POST, GET) to any internal or external server. This can result in the accessing or modification of data accessible from the Portal but will not affect its availability.", "edition": 1, "cvss3": {}, "published": "2021-09-15T19:15:00", "title": "CVE-2021-33705", "type": "cve", "cwe": [], "bulletinFamily": "NVD", "cvss2": {}, "cvelist": ["CVE-2021-33705"], "modified": "2021-09-15T20:20:00", "cpe": [], "id": "CVE-2021-33705", "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-33705", "cvss": {"score": 0.0, "vector": "NONE"}, "cpe23": []}, {"lastseen": "2021-09-16T07:26:28", "description": "Server-Side Request Forgery (SSRF) vulnerability has been detected in the SAP NetWeaver Development Infrastructure Component Build Service versions - 7.11, 7.20, 7.30, 7.31, 7.40, 7.50The SAP NetWeaver Development Infrastructure Component Build Service allows a threat actor who has access to the server to perform proxy attacks on server by sending crafted queries. Due to this, the threat actor could completely compromise sensitive data residing on the Server and impact its availability.Note: The impact of this vulnerability depends on whether SAP NetWeaver Development Infrastructure (NWDI) runs on the intranet or internet. The CVSS score reflects the impact considering the worst-case scenario that it runs on the internet.", "edition": 1, "cvss3": {}, "published": "2021-09-15T19:15:00", "title": "CVE-2021-33690", "type": "cve", "cwe": [], "bulletinFamily": "NVD", "cvss2": {}, "cvelist": ["CVE-2021-33690"], "modified": "2021-09-15T20:20:00", "cpe": [], "id": "CVE-2021-33690", "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-33690", "cvss": {"score": 0.0, "vector": "NONE"}, "cpe23": []}]}
Worried about where the next attack is coming from? We’ve got your back. REGISTER NOW for our upcoming live webinar, How to Think Like a Threat Actor, in partnership with Uptycs on Aug. 17 at 11 AM EST and find out precisely where attackers are targeting you and how to get there first. Join host Becky Bracken and Uptycs researchers Amit Malik and Ashwin Vamshi on Aug. 17 at 11AM EST for this LIVE discussion.