Privilege Escalation in SAP NetWeaver Application Server and ABAP Platform
CVE-2022-29611

8.8HIGH

Key Information:

Vendor
SAP
Vendor
CVE Published:
11 May 2022

Summary

The SAP NetWeaver Application Server for ABAP and ABAP Platform are affected by a security flaw where the systems fail to enforce adequate authorization checks for authenticated users. This oversight allows users to gain elevated privileges, potentially leading to unauthorized access to critical components and data within the system. Organizations using these platforms should take immediate steps to mitigate this vulnerability and ensure proper security controls are in place.

Affected Version(s)

SAP NetWeaver Application Server for ABAP and ABAP Platform 700

SAP NetWeaver Application Server for ABAP and ABAP Platform 701

SAP NetWeaver Application Server for ABAP and ABAP Platform 702

References

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.