{"id":737,"date":"2021-04-08T11:37:24","date_gmt":"2021-04-08T11:37:24","guid":{"rendered":"https:\/\/www.cert.hr\/novosti\/upozorenje-kriticna-ranjivost-sap-sustava\/"},"modified":"2026-11-04T08:45:15","modified_gmt":"2026-11-04T08:45:15","slug":"upozorenje-kriticna-ranjivost-sap-sustava","status":"publish","type":"post","link":"https:\/\/cert.hr\/en\/ranjivosti\/upozorenje-kriticna-ranjivost-sap-sustava\/","title":{"rendered":"[UPOZORENJE] Kriti\u010dna ranjivost SAP sustava"},"content":{"rendered":"<p class=\"wp-block-paragraph\">Prema vi\u0161e izvora i obavijesti <a href=\"https:\/\/zsis.hr\/\" title=\"https:\/\/zsis.hr\/\">ZSIS-a<\/a> (Zavoda za sigurnost informacijskih sustava), od vanjskog izvora pristigla je informacija o aktivnom iskori\u0161tavanju kriti\u010dnih ranjivosti SAP sustava koja je objavljena <a href=\"https:\/\/www.zdnet.com\/article\/recon-bug-lets-hackers-create-admin-accounts-on-sap-servers\/\">u srpnju 2020.<\/a> godine pod oznakama <strong><a href=\"https:\/\/epsilon.cert.hr\/cve\/CVE-2020-6207\">CVE-2020-6207<\/a>, <a href=\"https:\/\/epsilon.cert.hr\/cve\/CVE-2020-6287\">CVE-2020-6287<\/a><\/strong>.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Prema <a href=\"https:\/\/www.bleepingcomputer.com\/news\/security\/ongoing-attacks-are-targeting-unsecured-mission-critical-sap-apps\/\">BleepingComputer<\/a> potencijalni napada\u010di mogli bi navedene ranjivosti iskoristiti za preuzimanje kontrole nad ranjivim sustavima, zaobila\u017eenje sigurnosnih ograni\u010denja, otkrivanje osjetljivih informacija te izvo\u0111enje financijskih prijevara.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Za navedene ranjivosti postoji javno dostupan programski k\u020fd koji potencijalnim napada\u010dima omogu\u0107uje ostvarivanje administratorskih prava u sklopu SAP sustava.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Prema izvje\u0161taju sigurnosnih stru\u010dnjaka od sredine 2020. do o\u017eujka 2021. do\u0161lo je do 300 slu\u010dajeva uspje\u0161nog iskori\u0161tavanja nezakrpanih SAP aplikacija kroz 1500 provedenih napada u 20 zemalja.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Napada\u010di su iskoristili vi\u0161e sigurnosnih ranjivosti i nesigurne konfiguracije u SAP aplikacijama u poku\u0161ajima pristupanja ciljanim sustavima.<\/p>\n\n\n\n<figure data-wp-context=\"{&quot;imageId&quot;:&quot;6af1a093e427b&quot;}\" data-wp-interactive=\"core\/image\" data-wp-key=\"6af1a093e427b\" class=\"wp-block-image wp-lightbox-container\"><img decoding=\"async\" data-wp-class--hide=\"state.isContentHidden\" data-wp-class--show=\"state.isContentVisible\" data-wp-init=\"callbacks.setButtonStyles\" data-wp-on--click=\"actions.showLightbox\" data-wp-on--load=\"callbacks.setButtonStyles\" data-wp-on--pointerdown=\"actions.preloadImage\" data-wp-on--pointerenter=\"actions.preloadImageWithDelay\" data-wp-on--pointerleave=\"actions.cancelPreload\" data-wp-on-window--resize=\"callbacks.setButtonStyles\" src=\"https:\/\/www.bleepstatic.com\/images\/news\/u\/1109292\/2021\/SAP-attacks.png\" alt=\"SAP attacks\"\/><button\n\t\t\tclass=\"lightbox-trigger\"\n\t\t\ttype=\"button\"\n\t\t\taria-haspopup=\"dialog\"\n\t\t\tdata-wp-bind--aria-label=\"state.thisImage.triggerButtonAriaLabel\"\n\t\t\tdata-wp-init=\"callbacks.initTriggerButton\"\n\t\t\tdata-wp-on--click=\"actions.showLightbox\"\n\t\t\tdata-wp-style--right=\"state.thisImage.buttonRight\"\n\t\t\tdata-wp-style--top=\"state.thisImage.buttonTop\"\n\t\t>\n\t\t\t<svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"12\" height=\"12\" fill=\"none\" viewbox=\"0 0 12 12\">\n\t\t\t\t<path fill=\"#fff\" d=\"M2 0a2 2 0 0 0-2 2v2h1.5V2a.5.5 0 0 1 .5-.5h2V0H2Zm2 10.5H2a.5.5 0 0 1-.5-.5V8H0v2a2 2 0 0 0 2 2h2v-1.5ZM8 12v-1.5h2a.5.5 0 0 0 .5-.5V8H12v2a2 2 0 0 1-2 2H8Zm2-12a2 2 0 0 1 2 2v2h-1.5V2a.5.5 0 0 0-.5-.5H8V0h2Z\" \/>\n\t\t\t<\/svg>\n\t\t<\/button><figcaption><em>Izvor: BleepingComputer - Napadi koji ciljaju ranjive SAP aplikacije (SAP\/Onapsis)<\/em><\/figcaption><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Preporu\u010dujemo \u0161to br\u017eu primjenu posljednjih dostupnih zakrpi za SAP sustave kako bi se napada\u010dima onemogu\u0107ilo iskori\u0161tavanje kriti\u010dnih ranjivosti.<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Vi\u0161e informacija o ranjivostima i mogu\u0107nosti njihovog iskori\u0161tavanja mo\u017eete prona\u0107i na sljede\u0107im poveznicama:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/www.bleepingcomputer.com\/news\/security\/ongoing-attacks-are-targeting-unsecured-mission-critical-sap-apps\/\">https:\/\/www.bleepingcomputer.com\/news\/security\/ongoing-attacks-are-targeting-unsecured-mission-critical-sap-apps\/<\/a><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/us-cert.cisa.gov\/ncas\/current-activity\/2021\/04\/06\/malicious-cyber-activity-targeting-critical-sap-applications\">https:\/\/us-cert.cisa.gov\/ncas\/current-activity\/2021\/04\/06\/malicious-cyber-activity-targeting-critical-sap-applications<\/a><\/p>","protected":false},"excerpt":{"rendered":"<p>Prema vi\u0161e izvora i obavijesti ZSIS-a (Zavoda za sigurnost informacijskih sustava), od vanjskog izvora pristigla je informacija o aktivnom iskori\u0161tavanju kriti\u010dnih ranjivosti SAP sustava koja je objavljena u srpnju 2020. godine pod oznakama CVE-2020-6207, CVE-2020-6287. Prema BleepingComputer potencijalni napada\u010di mogli bi navedene ranjivosti iskoristiti za preuzimanje kontrole nad ranjivim sustavima, zaobila\u017eenje sigurnosnih ograni\u010denja, otkrivanje osjetljivih [&hellip;]<\/p>\n","protected":false},"author":3,"featured_media":1142,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":[],"meta":{"_acf_changed":false,"footnotes":""},"categories":[27],"tags":[],"tema":[],"class_list":["post-737","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-ranjivosti"],"acf":[],"_links":{"self":[{"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/posts\/737","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/comments?post=737"}],"version-history":[{"count":1,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/posts\/737\/revisions"}],"predecessor-version":[{"id":1145,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/posts\/737\/revisions\/1145"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/media\/1142"}],"wp:attachment":[{"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/media?parent=737"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/categories?post=737"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/tags?post=737"},{"taxonomy":"tema","embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/tema?post=737"},{"taxonomy":"format","embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/format?post=737"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}