Skip to content
OpenAdvisories
Medium · 6.5 CVE-2020-26818 EUVD-2020-19354GHSA-67fv-h3m9-7p8h

SAP NetWeaver AS ABAP (Web Dynpro), versions - 731, 740, 750, 751, 752, 753, 754, 755, 782, allows an authenticated user to access Web Dynp…

Published Nov 10, 2020 · Updated Aug 4, 2024 · Assigned by sap

Description

SAP NetWeaver AS ABAP (Web Dynpro), versions - 731, 740, 750, 751, 752, 753, 754, 755, 782, allows an authenticated user to access Web Dynpro components, which reveals sensitive system information that would otherwise be restricted to highly privileged users because of missing authorization, resulting in Information Disclosure.

Affected products

VendorProductAffectedFixed
SAP SE SAP NetWeaver AS ABAP (Web Dynpro) < 731, < 740, < 750, < 751, < 752, < 753, < 754, < 755, < 782 —

References