NetSight
IP …
high8.8

CVE-2019-0270

ABAP Server of SAP NetWeaver and ABAP Platform fail to perform necessary authorization checks for an authenticated user, resulting in escalation of privileges.

Impact

ABAP Server of SAP NetWeaver and ABAP Platform fail to perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. This has been corrected in the following versions: KRNL32NUC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL32UC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL64NUC 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49, 7.74, KRNL64UC 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49, 7.73, 7.74, 8.04, KERNEL 7.21, 7.45, 7.49, 7.53, 7.73, 7.74, 7.75, 8.04.

Affected products

VendorProductAffected versions
SapAdvanced Business Application Programming Platform Kernel
Versions 7.15, 7.21, 7.22, 7.49, 7.53, 7.73
SapAdvanced Business Application Programming Platform Krnl32nuc
Versions 7.21, 7.21ext, 7.22, 7.22ext
SapAdvanced Business Application Programming Platform Krnl32uc
Versions 7.21, 7.21ext, 7.22, 7.22ext
SapAdvanced Business Application Programming Platform Krnl64nuc
Versions 7.21, 7.21ext, 7.22, 7.22ext
SapAdvanced Business Application Programming Platform Krnl64uc
Versions 7.21, 7.21ext, 7.22, 7.22ext, 7.49, 7.73

Weakness classification

CWE-862

References