important · Edge — SAP Kernel
A client-controlled SAP tracing passport can execute operating-system commands before authentication.
Affects
SAP kernel-based business systems, including SAP S/4HANA, ERP/ECC, NetWeaver AS ABAP, Web Dispatcher, BW/4HANA, Enterprise Portal, PI/PO and Solution Manager.
Affected HTTP(S), SAP GUI and RFC listeners pass a client-supplied Extended Passport into shared kernel code before authentication and authorization checks.
Detail and 3 sources
A crafted passport can take control of the receiving process and run operating-system commands as the SAP installation owner.