NetSight
IP …
high8.8

CVE-2019-0257

Customizing functionality of SAP NetWeaver AS ABAP Platform (fixed in versions from 7.0 to 7.02, from 7.10 to 7.11, 7.30, 7.31, 7.40, from 7.50 to 7.53, from 7…

Impact

Customizing functionality of SAP NetWeaver AS ABAP Platform (fixed in versions from 7.0 to 7.02, from 7.10 to 7.11, 7.30, 7.31, 7.40, from 7.50 to 7.53, from 7.74 to 7.75) does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges.

Affected products

VendorProductAffected versions
SapNetweaver Application Server Abap
from 7.0 through 7.02
from 7.50 through 7.53
Versions 7.30, 7.31, 7.40
SapNetweaver As Abap
from 7.10 through 7.11
from 7.74 through 7.75

Weakness classification

CWE-862

References