Sensitive Information Exposure in SAP Solution Manager
CVE-2021-21483

8.2HIGH

Key Information:

Vendor

SAP
Status
SAP Solution Manager
Vendor
CVE Published:
13 April 2021

What is CVE-2021-21483?

SAP Solution Manager version 720 presents a vulnerability that can be exploited by high privileged attackers. This flaw allows unauthorized access to sensitive information, potentially compromising the confidentiality of the application. The exposure of such data can result in significant impacts beyond the directly affected component, threatening the overall integrity of the application environment.

Affected Version(s)

SAP Solution Manager < 720

References

https://launchpad.support.sap.com/#/notes/3017823
x_refsource_MISC
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageI...
x_refsource_MISC

CVSS V3.1

Score:
8.2
Severity:
HIGH
Confidentiality:
High
Integrity:
Low
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.