CVE-2021-27610

Published: Jun 16, 2021Modified: Nov 21, 2024

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

SAP NetWeaver ABAP Server and ABAP Platform, versions - 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 804, does not create information about internal and external RFC user in consistent and distinguished format, which could lead to improper authentication and may be exploited by malicious users to obtain illegitimate access to the system.

Affected (24)

Products: Sap: Netweaver Abap, Netweaver Application Server Abap

Sap

2 products

Netweaver Abap

Netweaver Application Server Abap

Configuration A

24 vulnerable

Vulnerable Software	Affected Versions
Sap Netweaver Abap	Version 700
Sap Netweaver Abap	Version 701
Sap Netweaver Abap	Version 702
Sap Netweaver Abap	Version 731
Sap Netweaver Abap	Version 740
Sap Netweaver Abap	Version 750
Sap Netweaver Abap	Version 751
Sap Netweaver Abap	Version 752
Sap Netweaver Abap	Version 753
Sap Netweaver Abap	Version 754
Sap Netweaver Abap	Version 755
Sap Netweaver Abap	Version 804
Sap Netweaver Application Server Abap	Version 700
Sap Netweaver Application Server Abap	Version 701
Sap Netweaver Application Server Abap	Version 702
Sap Netweaver Application Server Abap	Version 731
Sap Netweaver Application Server Abap	Version 740
Sap Netweaver Application Server Abap	Version 750
Sap Netweaver Application Server Abap	Version 751
Sap Netweaver Application Server Abap	Version 752
Sap Netweaver Application Server Abap	Version 753
Sap Netweaver Application Server Abap	Version 754
Sap Netweaver Application Server Abap	Version 755
Sap Netweaver Application Server Abap	Version 804