CVE-2019-0270
ABAP Server of SAP NetWeaver and ABAP Platform fail to perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. This has been corrected in the following versions: KRNL32NUC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL32UC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL64NUC 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49, 7.74, KRNL64UC 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49, 7.73, 7.74, 8.04, KERNEL 7.21, 7.45, 7.49, 7.53, 7.73, 7.74, 7.75, 8.04.
- Score
- CVSS 3.0 8.8 High
- Status
- Modified - cna@sap.com
- Published
- 2019-03-12
- Last modified
- 2024-08-04
- Weaknesses
- CWE-862
Affected products
- Advanced Business Application Programming Platform Kernel (Sap)
- Advanced Business Application Programming Platform Krnl32nuc (Sap)
- Advanced Business Application Programming Platform Krnl32uc (Sap)
- Advanced Business Application Programming Platform Krnl64nuc (Sap)
- Advanced Business Application Programming Platform Krnl64uc (Sap)
- Abap Platform Server Kernel (Sap Se)
- Abap Platform Server Krnl32nuc (Sap Se)
- Abap Platform Server Krnl32uc (Sap Se)
- Abap Platform Server Krnl64nuc (Sap Se)
- Abap Platform Server Krnl64uc (Sap Se)
References
- http://www.securityfocus.com/bid/107377
- https://launchpad.support.sap.com/#/notes/2727689
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=515408080