CVE-2020-26818

SAP NetWeaver AS ABAP (Web Dynpro), versions - 731, 740, 750, 751, 752, 753, 754, 755, 782, allows an authenticated user to access Web Dynpro components, which reveals sensitive system information that would otherwise be restricted to highly privileged users because of missing authorization, resulting in Information Disclosure.

Score

CVSS 3.1 8.8 High

Status

Modified - cna@sap.com

Published

2020-11-10

Last modified

2024-08-04

Weaknesses

CWE-862

Affected products

• Netweaver Application Server Abap (Sap)
• Sap Netweaver As Abap Web Dynpro (Sap Se)

References

• https://launchpad.support.sap.com/#/notes/2971954
• https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=562725571