SAP Solution Manager is an administrative system that provides centralized, real-time monitoring of all SAP enterprise solutions, business processes, and interfaces.
Last week a fully-functional exploit that abuses CVE-2020-6207 vulnerability target...
Critical Vulnerability (RECON) found in SAP NetWeaver AS Java
RECON - Remotely Exploitable Code On Netweaver
Background
July 13 US-CERT Alert, AA20-195A had been issued around SAP NetWeaver AS Java (LM Configuration Wizard) affecting versions - 7...
This week SAP released the September 2019 Security Notes. There are four Hot News and one critical note published. Below is the YTD Security Note distribution graph, along with a graph highlighting Hot News and critical vulnerabilities. For a full an...
This week SAP released the August 2019 Security Notes. There were four HotNews and two critical notes published. Below is the YTD Security Note distribution graph, along with a graph highlighting HotNews and critical vulnerabilities. For a full analy...
Onapsis Inc. Released a Free SAP RECON Vulnerability Scanning Tool to Quickly Detect Potentially Compromised and Exposed SAP Applications.
Here is the link. https://onapsis.com/press-releases/free-service-to-quickly-detect-vulnerable-sap-applicatio...
nnaik At this point, If you are not on the right SP level I would recommend applying the workaround. Also, Onapsis researchers who found this vulnerability put out free Instant Recon https://onapsis.com/free-sap-instant-recon-vulnerability-scan to c...
ssdeshmukh88 Please follow the security note for instructions to remediate. Disabling LMCTC is just a workaround, not a permanent solution https://launchpad.support.sap.com/#/notes/2934135
SAP has updated security note #1408081 from (2009) TODAY 2019.
This note relates to SAP Gateway access list security.
SAP "UPDATE 2: May 14, 2019: All sections of text in this SAP Note and its validity have been revised. In addition, the CVSS info...
