CVE-2019-0349
SAP Kernel (ABAP Debugger), versions KRNL32NUC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL32UC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL64NUC 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49, KRNL64UC 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49, 7.73, KERNEL 7.21, 7.49, 7.53, 7.73, 7.75, 7.76, 7.77, allows a user to execute “Go to statement” without possessing the authorization S_DEVELOP DEBUG 02, resulting in Missing Authorization Check
- Score
- CVSS 3.0 7.2 High
- Status
- Modified - cna@sap.com
- Published
- 2019-08-14
- Last modified
- 2024-08-04
- Weaknesses
- CWE-862
Affected products
- Advanced Business Application Programming Platform Kernel (Sap)
- Sap Kernel Kernel (Sap Se)
- Sap Kernel Krnl32nuc (Sap Se)
- Sap Kernel Krnl32uc (Sap Se)
- Sap Kernel Krnl64nuc (Sap Se)
- Sap Kernel Krnl64uc (Sap Se)
References
- https://launchpad.support.sap.com/#/notes/2798743
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=523998017
