Rewterz Threat Alert – Kimsuky APT group – IOCs
March 9, 2021Rewterz Threat Advisory – SAP NetWeaver Knowledge Management denial of service
March 10, 2021High
SAP HANA could allow a remote attacker to bypass security restrictions, caused by a flaw when the attached LDAP directory server is configured to enable unauthenticated bind. By sending a specially-crafted request, an attacker could exploit this vulnerability to bypass LDAP authentication.
Security bypass
SAP
SAP HANA 2.00
Refer to SAP note 3017378 for patch information.
Rewterz publishes threat advisories ahead of mainstream cybersecurity media, informed by an AI-Native Autonomous SOC that sees regional threat actor activity in real time. Subscribe to receive each new advisory as it publishes, plus a monthly Middle East threat landscape brief drawn from our own SOC telemetry. For teams evaluating their detection coverage, a 30-minute consultation with a senior analyst is also available, at your pace, when you're ready.
