Freely subscribe to our NEWSLETTER

This bulletin was written by Vigil@nce : http://vigilance.fr/

SYNTHESIS OF THE VULNERABILITY

An attacker can replay authentication data of the SAP J2EE Telnet
Administration Console.

Severity: 2/4

Creation date: 17/06/2010

DESCRIPTION OF THE VULNERABILITY

The Telnet Administration Console can be used to manage the J2EE
Engine using command line.

An attacker can replay a Telnet authentication session. Technical
details are unknown.

An attacker can therefore gain an administrative access to SAP
J2EE.

ACCESS TO THE COMPLETE VIGIL@NCE BULLETIN

http://vigilance.fr/vulnerability/SAP-NetWeaver-vulnerability-of-SAP-J2EE-Telnet-9713