CVE-2017-16691 Security feature bypass in SAP Note Assistant
Attackers can bypass digital signature verification in SAP Note Assistant to extract tampered files, potentially leading to code execution.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2017-16691?
CVE-2017-16691 is a medium-severity vulnerability in SAP Note Assistant, published on 12 Dec 2017. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
SAP Note Assistant tool (SAP BASIS from 7.00 to 7.02, from 7.10 to 7.11, 7.30, 7.31,7.40, from 7.50 to 7.52) supports upload of digitally signed note file of type 'SAR'. The digital signature verification is done together with the extraction of note file contained in the SAR archive. It is possible to append a tampered file to the SAR archive using SAPCAR tool and during the extraction, digital signature verification fails but the tampered file is extracted.
Weakness: CWE-20
Which versions are affected by CVE-2017-16691?
It affects 1 product.
Products include Sap Business Application Software Integrated Solution.
How do I fix CVE-2017-16691?
No fix has been published for CVE-2017-16691 yet. Limit exposure of the affected software until one is available.
Is CVE-2017-16691 being exploited?
There is no known exploitation of CVE-2017-16691 in the wild and no public exploit code.
Other vulnerabilities in SAP Note Assistant
- CVE-2019-0279 Missing authorization in SAP BASIS
- CVE-2018-2367 Path traversal in SAP BASIS (ABAP File Interface)
- CVE-2018-2363 Code injection in SAP NetWeaver
- CVE-2018-2494 Missing authorization in SAP Basis (ABAP Platform)
- CVE-2017-16682 Code injection in SAP NetWeaver Internet Transaction Server (ITS)
Sources
Also known as GHSA-4f5h-cfp2-m9r7.