More info from the CISA bulletin: https://us-cert.cisa.gov/ncas/alerts/aa20-195a

Also some on the SAP wiki: https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=5...

Unfortunately, most of it appears to be locked behind a sign-in.