Skip to content
OpenAdvisories
Unscored CVE-2019-0349 EUVD-2019-1122GHSA-6x67-5cp9-c6cq

SAP Kernel (ABAP Debugger), versions KRNL32NUC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL32UC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL64NUC 7.21, 7.21EXT…

Published Aug 14, 2019 · Updated Aug 4, 2024 · Assigned by sap

Description

SAP Kernel (ABAP Debugger), versions KRNL32NUC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL32UC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL64NUC 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49, KRNL64UC 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49, 7.73, KERNEL 7.21, 7.49, 7.53, 7.73, 7.75, 7.76, 7.77, allows a user to execute “Go to statement” without possessing the authorization S_DEVELOP DEBUG 02, resulting in Missing Authorization Check

Affected products

VendorProductAffectedFixed
SAP SE SAP Kernel (KRNL32NUC) < 7.21, < 7.21EXT, < 7.22, < 7.22EXT —
SAP SE SAP Kernel (KRNL32UC) < 7.21, < 7.21EXT, < 7.22, < 7.22EXT —
SAP SE SAP Kernel (KRNL64NUC) < 7.21, < 7.21EXT, < 7.22, < 7.22EXT, < 7.49 —
SAP SE SAP Kernel (KRNL64UC) < 7.21, < 7.21EXT, < 7.22, < 7.22EXT, < 7.49, < 7.73 —
SAP SE SAP Kernel (KERNEL) < 7.21, < 7.49, < 7.53, < 7.73, < 7.75, < 7.76, < 7.77 —

References