Threats tagged 'ghsa-j6xx-7886-qfg8'

A vulnerability in SAP NetWeaver and ABAP Platform involves a weak HMAC cryptography calculation during RFC callback processing. An authenticated attacker with high privileges and network access between application servers could intercept and modify communication, impersonating callers to execute unauthorized functions. This leads to high impact on confidentiality, integrity, and availability of the application.