Menace actors are possible exploiting a brand new vulnerability in SAP NetWeaver to add JSP internet shells with the objective of facilitating unauthorized file uploads and code execution.
“The exploitation is probably going tied to both a beforehand disclosed vulnerability like CVE-2017-9844 or an unreported distant file inclusion (RFI) concern,” ReliaQuest mentioned in a report revealed this week.
The cybersecurity
SAP Confirms Vital NetWeaver Flaw Amid Suspected Zero-Day Exploitation by Hackers
