Code injection

2014-11-0415:55:00

PRIOn knowledge base

www.prio-n.com

7.2 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

50.2%

JSON

SAPCRYPTOLIB before 5.555.38, SAPSECULIB, and CommonCryptoLib before 8.4.30, as used in SAP NetWeaver AS for ABAP and SAP HANA, allows remote attackers to spoof Digital Signature Algorithm (DSA) signatures via unspecified vectors.

CPENameOperatorVersion
commoncryptolible8.4.29
sapcryptolible5.555.37

CPE	Name	Operator	Version
	commoncryptolib	le	8.4.29
	sapcryptolib	le	5.555.37

References

blog.onapsis.com/sap-security-note-2067859-potential-exposure-to-digital-signature-spoofing/

secunia.com/advisories/57606

service.sap.com/sap/support/notes/2067859

twitter.com/SAP_Gsupport/status/522401681997570048