
SAP patches CVSS 10.0 PROXYGATE and ICM2SHELL flaws
Onapsis found no exploitation; network attackers can run commands as the SAP installation owner, <sid>adm.
1
2 stories, newest first · one card per story

Onapsis found no exploitation; network attackers can run commands as the SAP installation owner, <sid>adm.

Onapsis gave SAP a working unauthenticated exploit for ICM2SHELL; the November notes also cover ProxyGate and a SAML impersonation bug.
Today 230 readers · 236 views · 55 reads · all time 187K views