CVE-2022-29612: SSRF
First published: Tue Jun 14 2022(Updated: )
SAP NetWeaver, ABAP Platform and SAP Host Agent - versions KERNEL 7.22, 7.49, 7.53, 7.77, 7.81, 7.85, 7.86, 7.87, 7.88, 8.04, KRNL64NUC 7.22, 7.22EXT, 7.49, KRNL64UC 7.22, 7.22EXT, 7.49, 7.53, 8.04, SAPHOSTAGENT 7.22, allows an authenticated user to misuse a function of sapcontrol webfunctionality(startservice) in Kernel which enables malicious users to retrieve information. On successful exploitation, an attacker can obtain technical information like system number or physical address, which is otherwise restricted, causing a limited impact on the confidentiality of the application.
Credit: cna@sap.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Sap Host Agent | =7.22 | |
| SAP NetWeaver ABAP | =kernel_7.22 | |
| SAP NetWeaver ABAP | =kernel_7.49 | |
| SAP NetWeaver ABAP | =kernel_7.53 | |
| SAP NetWeaver ABAP | =kernel_7.77 | |
| SAP NetWeaver ABAP | =kernel_7.81 | |
| SAP NetWeaver ABAP | =kernel_7.85 | |
| SAP NetWeaver ABAP | =kernel_7.86 | |
| SAP NetWeaver ABAP | =kernel_7.87 | |
| SAP NetWeaver ABAP | =kernel_7.88 | |
| SAP NetWeaver ABAP | =kernel_8.04 | |
| SAP NetWeaver ABAP | =krnl64nuc_7.22 | |
| SAP NetWeaver ABAP | =krnl64nuc_7.22ext | |
| SAP NetWeaver ABAP | =krnl64uc_7.22 | |
| SAP NetWeaver ABAP | =krnl64uc_7.22ext | |
| SAP NetWeaver ABAP | =krnl64uc_7.49 | |
| SAP NetWeaver ABAP | =krnl64uc_7.53 | |
| SAP NetWeaver ABAP | =krnl64uc_8.04 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2022-29612?
The severity of CVE-2022-29612 is medium with a CVSS score of 4.3.
Which SAP software versions are affected by CVE-2022-29612?
SAP NetWeaver ABAP Platform versions KERNEL 7.22, 7.49, 7.53, 7.77, 7.81, 7.85, 7.86, 7.87, 7.88, 8.04, KRNL64NUC 7.22, 7.22EXT, 7.49, KRNL64UC 7.22, 7.22EXT, 7.49, 7.53, 8.04, and SAPHOSTAGENT 7.22 are affected by CVE-2022-29612.
How can an authenticated user misuse the sapcontrol web functionality in CVE-2022-29612?
An authenticated user can misuse a function of sapcontrol web functionality in CVE-2022-29612.
What is the Common Weakness Enumeration (CWE) ID associated with CVE-2022-29612?
The Common Weakness Enumeration (CWE) ID associated with CVE-2022-29612 is CWE-918.
Where can I find more information about CVE-2022-29612?
You can find more information about CVE-2022-29612 at the following references: [SAP Note 3194674](https://launchpad.support.sap.com/#/notes/3194674) and [SAP document](https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html).
- collector/nvd-index
- vendor/sap
- canonical/sap host agent
- version/sap host agent/7.22
- canonical/sap netweaver abap
- version/sap netweaver abap/kernel_7.22
- version/sap netweaver abap/kernel_7.49
- version/sap netweaver abap/kernel_7.53
- version/sap netweaver abap/kernel_7.77
- version/sap netweaver abap/kernel_7.81
- version/sap netweaver abap/kernel_7.85
- version/sap netweaver abap/kernel_7.86
- version/sap netweaver abap/kernel_7.87
- version/sap netweaver abap/kernel_7.88
- version/sap netweaver abap/kernel_8.04
- version/sap netweaver abap/krnl64nuc_7.22
- version/sap netweaver abap/krnl64nuc_7.22ext
- version/sap netweaver abap/krnl64uc_7.22
- version/sap netweaver abap/krnl64uc_7.22ext
- version/sap netweaver abap/krnl64uc_7.49
- version/sap netweaver abap/krnl64uc_7.53
- version/sap netweaver abap/krnl64uc_8.04