writeups.xyz / Advanced Inter-Process Desynchronization in SAP’s HTTP Server

Submitter : c2a

Date: 10 August 2022

Bounty : undisclosed

Vulnerabilities :

• Memory Corruption
• RCE
• HTTP Request Smuggling
• Web Cache Poisoning
• Desync Attack

Programs :

• SAP

Authors :

• Martin Doyhenard (@Tincho_508)

Link :
https://i.blackhat.com/USA-22/Wednesday/US-22-Doyhenard-Internal-Server-Error-wp.pdf