CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:H
EPSS
Percentile
9.5%
Due to the missing authorization checks in the
local systems, the admin users of SAP Web Dispatcher, SAP NetWeaver Application
Server (ABAP and Java), and SAP Content Server can impersonate other users and
may perform some unintended actions. This could lead to a low impact on
confidentiality and a high impact on the integrity and availability of the
applications.
Vendor | Product | Version | CPE |
---|---|---|---|
sap | netweaver_abap | kernel_7.22 | cpe:2.3:a:sap:netweaver_abap:kernel_7.22:*:*:*:*:*:*:* |
sap | netweaver_abap | kernel_7.53 | cpe:2.3:a:sap:netweaver_abap:kernel_7.53:*:*:*:*:*:*:* |
sap | netweaver_abap | kernel_7.54 | cpe:2.3:a:sap:netweaver_abap:kernel_7.54:*:*:*:*:*:*:* |
sap | netweaver_abap | kernel_7.77 | cpe:2.3:a:sap:netweaver_abap:kernel_7.77:*:*:*:*:*:*:* |
sap | netweaver_abap | kernel_7.85 | cpe:2.3:a:sap:netweaver_abap:kernel_7.85:*:*:*:*:*:*:* |
sap | netweaver_abap | kernel_7.89 | cpe:2.3:a:sap:netweaver_abap:kernel_7.89:*:*:*:*:*:*:* |
sap | netweaver_abap | kernel_7.93 | cpe:2.3:a:sap:netweaver_abap:kernel_7.93:*:*:*:*:*:*:* |
sap | netweaver_abap | krnl64nuc_7.22 | cpe:2.3:a:sap:netweaver_abap:krnl64nuc_7.22:*:*:*:*:*:*:* |
sap | netweaver_abap | krnl64nuc_7.22ext | cpe:2.3:a:sap:netweaver_abap:krnl64nuc_7.22ext:*:*:*:*:*:*:* |
sap | netweaver_abap | krnl64uc_7.22 | cpe:2.3:a:sap:netweaver_abap:krnl64uc_7.22:*:*:*:*:*:*:* |