Unscored CVE-2013-7364 EUVD-2013-7136GHSA-c84q-v2jr-6fc6

An unspecified J2EE core service in the J2EE Engine in SAP NetWeaver does not properly restrict access, which allows remote attackers to re…

Published Apr 10, 2014 · Updated Sep 16, 2024 · Assigned by mitre

Description

An unspecified J2EE core service in the J2EE Engine in SAP NetWeaver does not properly restrict access, which allows remote attackers to read and write to arbitrary files via unknown vectors.

References

20130222 [Onapsis Security Advisory 2013-004] SAP J2EE Core Service Arbitrary File Access mailing-list
https://service.sap.com/sap/support/notes/1682613
http://scn.sap.com/docs/DOC-8218
http://www.onapsis.com/get.php?resid=adv_onapsis-2013-004
http://www.onapsis.com/research-advisories.php