CVE-2019-0257

Published: Feb 15, 2019Modified: Nov 21, 2024

8.8

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: NVD

Description

Customizing functionality of SAP NetWeaver AS ABAP Platform (fixed in versions from 7.0 to 7.02, from 7.10 to 7.11, 7.30, 7.31, 7.40, from 7.50 to 7.53, from 7.74 to 7.75) does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges.

Affected (7)

Products: Sap: Netweaver Application Server Abap, Netweaver As Abap

Sap

2 products

Netweaver Application Server Abap

Netweaver As Abap

Configuration A

7 vulnerable

Vulnerable Software	Affected Versions
Sap Netweaver Application Server Abap	From 7.0 to 7.02
Sap Netweaver Application Server Abap	From 7.50 to 7.53
Sap Netweaver Application Server Abap	Version 7.30
Sap Netweaver Application Server Abap	Version 7.31
Sap Netweaver Application Server Abap	Version 7.40
Sap Netweaver As Abap	From 7.10 to 7.11
Sap Netweaver As Abap	From 7.74 to 7.75