high7.5
CVE-2017-15297
SAP Hostcontrol does not require authentication for the SOAP SAPControl endpoint.
Impact
SAP Hostcontrol does not require authentication for the SOAP SAPControl endpoint. This is SAP Security Note 2442993.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sap | Host Agent | Version 7.21 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/99528
- https://blogs.sap.com/2017/07/11/sap-security-patch-day-july-2017/
- https://erpscan.io/advisories/erpscan-17-034-sap-hostcontrol-unprotected-web-method-dos/
- http://www.securityfocus.com/bid/99528
- https://blogs.sap.com/2017/07/11/sap-security-patch-day-july-2017/
- https://erpscan.io/advisories/erpscan-17-034-sap-hostcontrol-unprotected-web-method-dos/