Home Page - SAP Basis World

[CVE-2022-22536] – major vulnerability in SAP NetWeaver, SAP Content Server and SAP Web Dispatcher

It’s new (08.02.2022) and very important issue becasue CVSS score is 10 (critical). An unauthenticated attacker can prepend a victim’s request with arbitrary data. This way, the attacker can execute functions impersonating the victim or poison intermediary Web caches. A successful attack could result in complete compromise of Confidentiality, Integrity and Availability of the system.

Mass Changes of Jobs in ABAP environment

Today will be few words about useful program which can save your time. Imagine dozens or hundreds of jobs in the system where You need to make changes. I have in mind jobs in transaction SM37 and changes for example:

program/variant,
change user,
change execution server.

SAP Security Notes Summary – January 2022

Traditionally once a month I’ll publish review all SAP security notes and news that were released in a given month. SAP Security Notes contain SAP’s expert advice regarding important action items and patches to ensure the security of your systems.

SAP Diagnostic Agent – install procedure

Diagnostics Agent (DA) SAP Solution Manager Diagnostics Agent is the remote component of End-to-End Root Cause Analysis. It allows having a connection between SAP Solution Manager and the Managed System(s), and then to collect information from the Managed Systems for reporting purposes.

SAP HANA – problem with terminating sessions

In last time I had problem with long running SAP HANA session, I couldn’t stop this operation. I saw note: 2092196 – How-To: Terminating Sessions in SAP HANA. I used all commands from this note but I still have problem with terminating session. Session was still active, although:

15 January 2022
admin
2 Comments
PO

In last time, i.e. 11.01.2022 SAP released Log4j 2.17.1 update for SAP NetWeaver Process Integration. With this update all currently known Log4j vulnerabilities are fixed. More information You find in note: 3135581 and below You find solution how to implement this fix.