In June 2022, SAP released several critical security updates addressing vulnerabilities across SAProuter, SAP PowerDesigner Proxy, SAP Automotive Solutions, and SAP NetWeaver Application Server Java. These patches resolve high-priority risks, including remote command execution, privilege escalation, and unauthorized access to system services.
What is the high-priority vulnerability in SAProuter?
Note 3158375 addresses a critical vulnerability in SAProuter that allows attackers to execute administrative commands from remote clients. Typically, SAProuter is designed to only accept these commands from local sources. However, this security can be bypassed if the saprouttab file contains entries using the P or S prefix combined with wildcards for the target host and port.
To permanently resolve this, SAP recommends patching SAProuter versions 7.22 and 7.53 to patch levels 1119 and 1011, respectively. As a temporary fix, administrators should replace wildcard entries in the saprouttab with specific IP addresses or hostnames.
Which other SAP components were patched in June 2022?
Beyond the SAProuter update, SAP released patches for several other components:
- SAP PowerDesigner Proxy (Note 3197005): Resolves a privilege escalation vulnerability. Attackers with non-administrative access could potentially write files to the system disk root path, which would then be executed with elevated privileges during an application restart or reboot.
- SAP Automotive Solutions (Note 2726124): Patches missing authorization checks across multiple components, which could allow users to escalate their privileges within the system.
- SAP NetWeaver Application Server Java (Note 3147498): Addresses an access control gap that previously allowed unauthorized access to remote objects, such as
adminadapterservices.
Summary of June 2022 SAP Security Notes
| SAP Note | Component | Vulnerability Type | Impact |
|---|---|---|---|
| 3158375 | SAProuter | Remote Command Execution | High Priority |
| 3197005 | PowerDesigner Proxy | Privilege Escalation | System Disk Access |
| 2726124 | SAP Automotive Solutions | Authorization Bypass | Privilege Escalation |
| 3147498 | NetWeaver AS Java | Access Control Gap | Unauthorized Access |
Frequently Asked Questions
How can I mitigate the SAProuter vulnerability without an immediate patch?
As a temporary measure, you should review your saprouttab file and replace any P or S prefix entries that use wildcards for target hosts or ports with specific, authorized IP addresses or hostnames.
What is the risk associated with the SAP PowerDesigner Proxy vulnerability?
This vulnerability allows a non-administrative user to write or create program files on the system disk root path. These files could then be executed with elevated application privileges during a system reboot, leading to full privilege escalation.
Why should administrators update SAP NetWeaver AS Java?
Note 3147498 removes an access control gap that left remote objects, specifically adminadapter services, exposed. Updating your system ensures that only authorized users can access these sensitive administrative services.