CVE-2016-4551: High severity sap netweaver vulnerability
The (1) SAPBASIS and (2) SAPABA components 7.00 SP Level 0031 in SAP NetWeaver 2004s might allow remote attackers to spoof IP addresses written to the Security Audit Log via vectors related to the network landscape, aka SAP Security Note 2190621.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-4551?
CVE-2016-4551 is classified as a medium severity vulnerability due to the potential for IP address spoofing.
How do I fix CVE-2016-4551?
To mitigate CVE-2016-4551, it is recommended to upgrade to the latest versions of the SAP_BASIS and SAP_ABA components.
What systems are affected by CVE-2016-4551?
CVE-2016-4551 affects SAP NetWeaver 2004s and specifically the SAP_BASIS and SAP_ABA components at version 7.00 SP Level 0031.
Can CVE-2016-4551 allow unauthorized access?
While CVE-2016-4551 does not provide direct unauthorized access, it can enable attackers to spoof IP addresses, compromising the integrity of security logs.
Is there a patch available for CVE-2016-4551?
Yes, SAP provides patches that address the vulnerabilities associated with CVE-2016-4551, and applying them is essential for security.