Required CVE Record Information
Description
An attacker can use specially crafted inputs to execute commands on the host of a TREX / BWA installation, SAP Basis, versions: 7.0 to 7.02, 7.10 to 7.11, 7.30, 7.31, 7.40 and 7.50 to 7.53. Not all commands are possible, only those that can be executed by the <sid>adm user. The commands executed depend upon the privileges of the <sid>adm user.
Updated:
This container includes required additional information provided by the CVE Program for this vulnerability.
References 3 Total
- securityfocus.com: 105904 vdb-entryx_transferred
- https://launchpad.support.sap.com/#/notes/2675696 x_transferred
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=503809832 x_transferred