| |
Vulnerability CVE-2019-0257
Published: 2019-02-15 Modified: 2019-02-16
| Description: |
Customizing functionality of SAP NetWeaver AS ABAP Platform (fixed in versions from 7.0 to 7.02, from 7.10 to 7.11, 7.30, 7.31, 7.40, from 7.50 to 7.53, from 7.74 to 7.75) does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. |
Type:
CWE-285 (Improper Authorization)
CVSS2 => (AV:N/AC:L/Au:S/C:P/I:P/A:P)
| CVSS Base Score |
Impact Subscore |
Exploitability Subscore |
6.5/10 |
6.4/10 |
8/10 |
| Exploit range |
Attack complexity |
Authentication |
Remote |
Low |
Single time |
| Confidentiality impact |
Integrity impact |
Availability impact |
Partial |
Partial |
Partial |
References: |
http://www.securityfocus.com/bid/106999
https://launchpad.support.sap.com/#/notes/2728839
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=510922943
|
|
|
Copyright 2024, cxsecurity.com
|
|
|
