Skip to content
OpenAdvisories
Unscored CVE-2019-0257 EUVD-2019-1030GHSA-xg34-8qvc-j4hh

Customizing functionality of SAP NetWeaver AS ABAP Platform (fixed in versions from 7.0 to 7.02, from 7.10 to 7.11, 7.30, 7.31, 7.40, from …

Published Feb 15, 2019 · Updated Aug 4, 2024 · Assigned by sap

Description

Customizing functionality of SAP NetWeaver AS ABAP Platform (fixed in versions from 7.0 to 7.02, from 7.10 to 7.11, 7.30, 7.31, 7.40, from 7.50 to 7.53, from 7.74 to 7.75) does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges.

Affected products

VendorProductAffectedFixed
SAP SE ABAP Platform(SAP Basis) < from 7.0 to 7.02, < from 7.10 to 7.11, < 7.30, < 7.31, < 7.40, < from 7.50 to 7.53, < from 7.74 to 7.75 —

References