Skip to content
OpenAdvisories
Medium · 5.4 CVE-2020-26819 EUVD-2020-19355GHSA-6hm9-wj83-37rw

SAP NetWeaver AS ABAP (Web Dynpro), versions - 731, 740, 750, 751, 752, 753, 754, 755, 782, allows an authenticated user to access Web Dynp…

Published Nov 10, 2020 · Updated Aug 4, 2024 · Assigned by sap

Vendor: SAP Product: SAP NetWeaver AS ABAP (Web Dynpro)

Description

SAP NetWeaver AS ABAP (Web Dynpro), versions - 731, 740, 750, 751, 752, 753, 754, 755, 782, allows an authenticated user to access Web Dynpro components, that allows them to read and delete database logfiles because of Improper Access Control.

Affected products

VendorProductAffectedFixed
SAP SE SAP NetWeaver AS ABAP (Web Dynpro) < 731, < 740, < 750, < 751, < 752, < 753, < 754, < 755, < 782 —

References