{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "SERVERCORE 7.10 ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "SAP",
          "scada": false
        }
      }
    },
    {
      "description": "SERVERCORE 7.30.",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "SAP",
          "scada": false
        }
      }
    },
    {
      "description": "SAP-JEECOR 6.40 ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "SAP",
          "scada": false
        }
      }
    },
    {
      "description": "SAP-JEECOR 7.02 ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "SAP",
          "scada": false
        }
      }
    },
    {
      "description": "SERVERCORE 7.20 ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "SAP",
          "scada": false
        }
      }
    },
    {
      "description": "SAP-JEECOR 7.01 ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "SAP",
          "scada": false
        }
      }
    },
    {
      "description": "SAP-JEECOR 7.00 ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "SAP",
          "scada": false
        }
      }
    },
    {
      "description": "SERVERCORE 7.11 ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "SAP",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Description\n\nCette vuln\u00e9rabilit\u00e9 dans l\u0027interface Telnet du moteur J2EE de SAP permet\nles attaques par rejeu. Une personne malveillante peut exploiter cette\nvuln\u00e9rabilit\u00e9 pour avoir acc\u00e8s \u00e0 des composants auxquels il n\u0027a\nnormalement pas la permission d\u0027acc\u00e9der.\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [],
  "initial_release_date": "2010-06-18T00:00:00",
  "last_revision_date": "2010-06-18T00:00:00",
  "links": [],
  "reference": "CERTA-2010-AVI-272",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2010-06-18T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 permettant de contourner la politique de s\u00e9curit\u00e9 du\nmoteur J2EE de SAP a \u00e9t\u00e9 d\u00e9couverte.\n",
  "title": "Vuln\u00e9rabilit\u00e9 dans SAP J2EE",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 SAP 1425847",
      "url": "http://service.sap.com/sap/support/notes/1425847"
    }
  ]
}