OS Command Execution Vulnerability in SAP Cloud Connector
CVE-2021-33693

5.7MEDIUM

Key Information:

Vendor

SAP
Status
SAP Cloud Connector
Vendor
CVE Published:
15 September 2021

What is CVE-2021-33693?

The SAP Cloud Connector version 2.0 has a vulnerability that permits an authenticated administrator to alter configuration files. This alteration can lead to the injection of malicious code, thereby creating a potential risk for OS command execution. Such an exploitation could allow unauthorized users to execute arbitrary commands on the host operating system, resulting in severe security implications.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

SAP Cloud Connector < 2.0

References

https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageI...
x_refsource_MISC
https://launchpad.support.sap.com/#/notes/3058553
x_refsource_MISC

CVSS V3.1

Score:
5.7
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
High
Availability:
Low
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.