CVE-2023-29108

The IP filter in ABAP Platform and SAP Web Dispatcher - versions WEBDISP 7.85, 7.89, KERNEL 7.85, 7.89, 7.91, may be vulnerable by erroneous IP netmask handling. This may enable access to backend applications from unwanted sources.

Score

CVSS 3.1 5.3 Medium

Status

Modified - cna@sap.com

Published

2023-04-11

Last modified

2025-02-12

Weaknesses

CWE-923

Affected products

• Abap Platform And Sap Web Dispatcher (Sap)
• Abap Platform Kernel (Sap)
• Web Dispatcher (Sap)

References

• https://launchpad.support.sap.com/#/notes/3315312
• https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html