| |
Vulnerability CVE-2021-21486
Published: 2021-03-09
| Description: |
SAP Enterprise Financial Services versions, 101, 102, 103, 104, 105, 600, 603, 604, 605, 606, 616, 617, 618, 800, does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. |
Type:
CWE-862 (Missing Authorization)
CVSS2 => (AV:N/AC:L/Au:S/C:P/I:P/A:P)
| CVSS Base Score |
Impact Subscore |
Exploitability Subscore |
6.5/10 |
6.4/10 |
8/10 |
| Exploit range |
Attack complexity |
Authentication |
Remote |
Low |
Single time |
| Confidentiality impact |
Integrity impact |
Availability impact |
Partial |
Partial |
Partial |
References: |
https://launchpad.support.sap.com/#/notes/3007888
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=571343107
|
|
|
Copyright 2024, cxsecurity.com
|
|
|
