CVE-2021-38178

The software logistics system of SAP NetWeaver AS ABAP and ABAP Platform versions - 700, 701, 702, 710, 730, 731, 740, 750, 751, 752, 753, 754, 755, 756, enables a malicious user to transfer ABAP code artifacts or content, by-passing the established quality gates. By this vulnerability malicious code can reach quality and production, and can compromise the confidentiality, integrity, and availability of the system and its data.

Score

CVSS 3.1 8.8 High

Status

Modified - cna@sap.com

Published

2021-10-12

Last modified

2024-08-04

Weaknesses

CWE-285

Affected products

• Netweaver Abap (Sap)
• Netweaver Application Server Abap (Sap)
• Sap Netweaver As Abap And Abap Platform (Sap Se)

References

• https://launchpad.support.sap.com/#/notes/3097887
• https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=587169983