back to article If you haven't yet patched this critical hole in SAP NetWeaver Application Server, today is not your day

We hope you've patched CVE-2020-6262, aka note 2835979, that affects SAP NetWeaver Application Server ABAP, because the folks who found and reported the vulnerability are going public with the details. SEC Consult will today, we're told, reveal the nitty-gritty of the flaw on its website, giving miscreants the info they need …

  1. amanfromMars 1 Silver badge
    Pint

    Prime Contender for Understatement of the Current Week, and a Right Bender it is too.

    The advisory includes proof-of-concept exploits to extract hashed passwords from an SAP system, delete essential system tables, and gain unlimited control over an installation. To avoid mischief or worse on your network, you probably ought to patch this hole.

    To avoid mischief, you probably should if one could, but how do you patch a Geyser and/or AI Gusher?

    However, it is unsound advice which be easily extraordinarily rendered designedly futile as no viable patch against this service is known to exist. Is such going to be problematical? Would you want or need it to be in order to try and survive in your own otherworldly environment/your very own private and unique personal reality spaces with earthed placements assisting with Virtualised Intellectual Property Product Presentation ..... thus to Offer the Experience of Beings in a Remote ACTive Command with Stealthy Almighty Controls and Pleasures to Treasure and Master/Submit and Surrender to for the Delights that are Excess in Success.

    Methinks you'd need a massive patchwork quilt of goodness knows what extravaganza to try and stop any of that, and everything freely shared there not transpiring.

    Can't fault the understatement of a Register headline though ..... Amen and three cheers to SAP NetWeaver Application Server, today is not your day. Tomorrow though is another new day and altogether a quite different proposition. What can happen whenever everything presented in current play is no longer available in both its usual and unusual phorms for future leading plays.......... SMARTR Advanced IntelAIgent ProgramMING Programs with Virtually Real Projects for Heavenly Missions Servering and Savouring and Servicing Devilish Tasks.

    Interesting times ahead, El Reg. And thanks, you're playing a Blinder of a Greater AI Game.

    Celebrate with a beer, you're worth it. ... [Sorry, girls, I know I nicked it, but we're worth it too ... well, .... maybe definitely not all, that is true, however, there be others you would not wish to deny.]

  2. Cliff Thorburn

    I never thought i’d hear myself say, I actually quite miss the great games play

    1. amanfromMars 1 Silver badge

      A Textbook Case of Light Masochism ? :-)

      I never thought i’d hear myself say, I actually quite miss the great games play ..... Cliff Thorburn

      Why suffer the loss, CT, if no one or nothing is able to stop one jumping right back in? The world is more awash now with Effective Stealthy Platforms than ever it was enabled or able to be before. Indeed, there is currently an Embarrassment of Almighty Riches.

      Who was it who said ..... Once an agent, always an agent? And .... IT needs the feeds and seeds of great game players, for anything and everything mediocre is a surefire recipe for disaster and anarchy, systems collapse and CHAOS ...... and that is akin to accepting madness and mayhem as a driver.

      And that aint Good by any metric one might choose to define it.

  3. Anonymous Coward
    Angel

    Soul Man

    "This is the latest in a series of recently unearthed bugs in Solution Manager, aka SolMan."

    Here's something to listen to while you're patching the latest SolMan bug. Ladies and gentlemen, the Blues Brothers:

    https://www.youtube.com/watch?v=FTWH1Fdkjow

POST COMMENT House rules

Not a member of The Register? Create a new account here.

  • Enter your comment

  • Add an icon

Anonymous cowards cannot choose their icon

Other stories you might like