Lucene search

K
securityvulnsSecurityvulnsSECURITYVULNS:DOC:29274
HistoryApr 22, 2013 - 12:00 a.m.

[ESNC-2013-001] Privilege Escalation in SAP Healthcare Industry Solution

2013-04-2200:00:00
vulners.com
21

[ESNC-2013-001] Privilege Escalation in SAP Healthcare Industry Solution

Please refer to www.esnc.de for the original security advisory,
updates and additional information.


  1. Business Impact

This vulnerability allows bypassing authority checks that exist before
executing a transaction. A transaction in SAP terminology is the
execution of a program.

By exploiting this vulnerability, an attacker can also control the
transaction to be executed, allowing it to obtain critical rights in
the system and bypassing certain segregation of duties (SoD)
restrictions.

Although this vulnerability is found in the SAP industry solution for
healthcare, the functionality is also present in the SAP ERP central
component (ECC 6). Thus, customers in other industries are also
affected.

Risk Level: High


  1. Advisory Information

– Security Advisory ID: ESNC-2013-001
– CVE ID: CVE-2013-3061
– Original Security Advisory:
http://www.esnc.de/sap-security-audit-and-scan-services/security-advisories/36-privilege-escalation-in-sap-is-healthcare
– Vendor Patch Date: 2012-06-12
– Public Advisory Date: 2013-04-16
– Researcher: Ertunga Arsal


  1. Vulnerability Information

– Vendor: SAP
– Affected Components: IS-H Industry-Specific Component Hospital
– Vulnerable Function: ISHMED-PATRED_TRANSACT_RFCCALL
– Vulnerability Class: Privilege Escalation
– CVSS v2 score by the vendor: 6.0 (AV:N/AC:L/AU:N/C:P/I:P/A:P)
– Remotely Exploitable: Yes
– Authentication Required: Yes


  1. Solution

Please apply the security patch [SAP Note 1691744] supplied by the vendor.
More information can be found at vendor's site:

https://service.sap.com/sap/support/notes/1691744


About ESNC

ESNC GmbH, Germany is a company specialized in SAP security audit, SAP
penetration testing, ABAP security review and SAP vulnerability
assessment services.

It's flagship product ESNC Security Suite is used by many large
enterprises for vulnerability scanning their SAP ABAP and Java
systems, running ABAP code security reviews, enforcing SAP security
baselines and managing compliance.

For more information about our products and services, please visit our
web page at www.esnc.de

Related for SECURITYVULNS:DOC:29274