Protect your corporate IT network from hackers and other unwanted intruders with Proxy Sentinel™. Click here for all the details and get the peace of mind you deserve.
Back to our Homepage Proxy Sentinel™ high performance Internet proxy server and secure firewall solution Firewall Sentinel™ secure & powerful Internet firewall solution About Internet Security.ca and GCIS Frequently Asked Questions on Internet security issues Internet Security Industry News - Stay informed of what's happening Contact Internet Security.ca today and order your Proxy Sentinel™ or Firewall Sentinel™ server now!

SAP applies no less than 25 security patches to its software

Sponsered ads:
Read the latest IT news. Visit ItDirection.net. Updated several times daily.

If you need reliability when it comes to SMTP servers, get the best, get Port 587.

Get a powerful Linux Dual-Core dedicated server for less than $2.67 a day!

Share on Twitter.

March 15, 2017

We just learned that German-based SAP has made available today no less than twenty-five security patches to its software, and two others for you to consider if you want them or not.

The most critical, which SAP customers can read about at Security Note 2424173, ranks a 9.8 on the 10-point CVSS security vulnerability assessing-scale.

And here's why-- SAP says the security issue, which hits HANA's User Self Service feature “can allow an attacker to take full control of a system. Any system.”

But first, you'll need to have turned on the 'User Self Service' component in the software. That feature is always off by default.

Then, you'll need to run it on an untrusted network. If you find yourself on the wrong side of any of those conditions, you're looking at either a security patch or a deliberate disablement to improve matters.

For instance, SAP's HANA 'Extended Application Services' have an 8.8-rated security flaw that “could allow a potential hacker to elevate admin privileges by impersonating another user in the system.”

There's also a remote code execution security vulnerability in SAP's graphical user interface for Windows that scores an 8.0 and a 7.2-rated update to an older Note concerning an SQL injection vulnerability impacting SAP Database Monitors for Oracle.

Source: SAP.

Sponsered ads:
Read the latest IT news. Visit ItDirection.net. Updated several times daily.

If you need reliability when it comes to SMTP servers, get the best, get Port 587.

Get a powerful Linux Dual-Core dedicated server for less than $2.67 a day!

Share on Twitter.


Home | Proxy Sentinel™ | Firewall Sentinel™ | FAQ | News | Sitemap | Contact
Copyright © Internet Security.ca    Terms of use    Privacy agreement    Legal disclaimer