Detections
Analytics
SAP NetWeaver AS JAVA Missing XML Validation (3053066)
medium Nessus Plugin ID 150718
Language:
Synopsis
The remote SAP NetWeaver AS Java server may be affected by a missing XML validation vulnerability.Description
SAP Netweaver Application Server Java versions 7.20, 7.30, 7.31, 7.40, and 7.50 allow an attacker authenticated as an administrator to connect over a network and submit a specially crafted XML file in the application because of missing XML Validation. This vulnerability enables an attacker to fully compromise confidentiality by allowing them to read any file on the filesystem or fully compromise availability by causing the system to crash. The attack cannot be used to change any data so that there is no compromise as to integrity.Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.
Solution
Apply the appropriate patch according to the vendor advisory.See Also
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=578125999
Plugin Details
Severity: Medium
ID: 150718
File Name: sap_netweaver_as_3053066.nasl
Version: 1.3
Type: remote
Family: Web Servers
Published: 6/11/2021
Updated: 6/17/2021
Configuration: Enable paranoid mode
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 5.2
CVSS v2
Risk Factor: Medium
Base Score: 5.5
Temporal Score: 4.1
Vector: CVSS2#AV:N/AC:L/Au:S/C:P/I:N/A:P
CVSS Score Source: CVE-2021-27635
CVSS v3
Risk Factor: Medium
Base Score: 6.5
Temporal Score: 5.7
Vector: CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:H
Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C
Vulnerability Information
CPE: cpe:/a:sap:netweaver_application_server
Required KB Items: installed_sw/SAP Netweaver Application Server (AS), Settings/ParanoidReport
Exploit Ease: No known exploits are available
Patch Publication Date: 6/8/2021
Vulnerability Publication Date: 6/8/2021
Reference Information
CVE: CVE-2021-27635
IAVA: 2021-A-0281