SAP Security Patch Day – May 2020

ronjor · May 12, 2020

Created by Aditi Kulkarni

This post by SAP Product Security Response Team shares information on Patch Day Security Notes* that are released on second Tuesday of every month and fix vulnerabilities discovered in SAP products. SAP strongly recommends that the customer visits the Support Portal and applies patches on a priority to protect their SAP landscape.

On 12th of May 2020, SAP Security Patch Day saw the release of 18 Security Notes. There are 4 updates to previously released Patch Day Security Notes.
Click to expand...

guest · Jun 3, 2020

Patch SAP Adaptive Server Enterprise now to avoid takeover risk
June 3, 2020
https://www.bleepingcomputer.com/ne...server-enterprise-now-to-avoid-takeover-risk/

Organizations using SAP Adaptive Server Enterprise (ASE) should immediately update the product to the latest version as researchers today have detailed the nature of critical vulnerabilities.

SAP delivered in May patches for seven flaws flaws affecting ASE for Windows and Linux. Technical details are now available for six of them impacting various components and services.
Critical and high-severity bugs
In a report today, security researchers at Trustwave explain how the vulnerabilities they found and reported could be leveraged by a threat actor.

One of the critical issues is an arbitrary code execution (CVE-2020-6248, 9.1 severity score) that allows corrupting the Backup Server configuration file with a simple command. [...]
Click to expand...

These vulnerabilities were disclosed responsibly to the vendor, who already delivered fixes. Given the severity of the bugs, organizations using SAP ASE should prioritize installing the updates.
Click to expand...

Trustwave: System Takeover Through New SAP ASE Vulnerabilities

Log in or Sign up

SAP Security Patch Day – May 2020

ronjor Global Moderator

guest Guest

Log in or Sign up

SAP Security Patch Day – May 2020

ronjor Global Moderator

guest Guest

Useful Searches