← Back

CVE-2019-0270

nvd nist
Published: Mar 12, 2019Modified: Nov 21, 2024

JSON object

Loading...
8.8
Vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Exploitability: 2.8 / Impact: 5.9
Source: NVD

Description

ABAP Server of SAP NetWeaver and ABAP Platform fail to perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. This has been corrected in the following versions: KRNL32NUC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL32UC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL64NUC 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49, 7.74, KRNL64UC 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49, 7.73, 7.74, 8.04, KERNEL 7.21, 7.45, 7.49, 7.53, 7.73, 7.74, 7.75, 8.04.

Affected (29)

Configuration A
29 vulnerable
Vulnerable SoftwareAffected Versions
Sap
Version 7.15
Version 7.21
Version 7.22
Version 7.49
Version 7.53
Version 7.73
Version 7.74
Version 7.75
Version 8.04
Sap
Version 7.21
Version 7.21ext
Version 7.22
Version 7.22ext
Sap
Version 7.21
Version 7.21ext
Version 7.22
Version 7.22ext
Sap
Version 7.21
Version 7.21ext
Version 7.22
Version 7.22ext
Sap
Version 7.21
Version 7.21ext
Version 7.22
Version 7.22ext
Version 7.49
Version 7.73
Version 7.74
Version 8.04

References (6)

Source: cna@sap.com
Third Party Advisory
Source: cna@sap.com
Permissions RequiredVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Permissions RequiredVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.