CVE-2021-40504

A certain template role in SAP NetWeaver Application Server for ABAP and ABAP Platform - versions 700, 701, 702, 710, 711, 730, 731, 740, 750, 751, 752, 753, 754, 755, 756, contains transport authorizations, which exceed expected display only permissions.

Score

CVSS 3.1 4.9 Medium

Status

Modified - cna@sap.com

Published

2021-11-10

Last modified

2024-08-04

Weaknesses

CWE-863

Affected products

• Netweaver Application Server Abap (Sap)
• Sap Netweaver As For Abap And Abap Platform (Sap Se)

References

• https://launchpad.support.sap.com/#/notes/3105728
• https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=589496864