CVE-2005-3634: Medium severity SAP SAP Web Application Server vulnerability
frameset.htm in the BSP runtime in SAP Web Application Server (WAS) 6.10 through 7.00 allows remote attackers to log users out and redirect them to arbitrary web sites via a close command in the sap-sessioncmd parameter and a URL in the sap-exiturl parameter.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2005-3634?
CVE-2005-3634 is considered a medium severity vulnerability as it allows attackers to log users out and potentially redirect them.
How do I fix CVE-2005-3634?
To fix CVE-2005-3634, it is recommended to upgrade your SAP Web Application Server to the latest supported version that addresses this issue.
What versions are affected by CVE-2005-3634?
CVE-2005-3634 affects SAP Web Application Server versions 6.10, 6.20, 6.40, and 7.0.
What type of vulnerability is CVE-2005-3634?
CVE-2005-3634 is a session management vulnerability that can lead to unauthorized session termination and redirects.
Can CVE-2005-3634 be exploited remotely?
Yes, CVE-2005-3634 can be exploited remotely by attackers to disrupt user sessions.