Unauthorized Access Vulnerability in SAP NetWeaver ABAP
CVE-2018-2494
8HIGH
Key Information:
- Vendor
SAP
- Vendor
- CVE Published:
- 11 December 2018
What is CVE-2018-2494?
An authorization bypass vulnerability exists in SAP Basis AS ABAP, allowing authenticated users to escalate their privileges without appropriate access controls. This issue impacts versions of SAP NetWeaver from 700 to 750 and has been addressed with necessary security patches to ensure that permission checks are enforced correctly.
Affected Version(s)
SAP Basis (ABAP Platform) = 7.50 to 7.53
SAP Basis (AS ABAP of SAP NetWeaver) = 7.00 to 7.02 = 7.00 to 7.02
SAP Basis (AS ABAP of SAP NetWeaver) = 7.10 to 7.30 = 7.10 to 7.30