SAP NetWeaver AS ABAP Platform, Krnl64nuc 7.74, krnl64UC 7.73, 7.74, Kernel 7.73, 7.74, 7.75, fails to validate type of installation for an ABAP Server system correctly. That behavior may lead to situation, where business user achieves access to the full SAP Menu, that is 'Easy Access Menu'. The situation can be misused by any user to leverage privileges to business functionality.
References
| Link | Resource |
|---|---|
| http://www.securityfocus.com/bid/106987 | Third Party Advisory VDB Entry |
| https://launchpad.support.sap.com/#/notes/2723570 | Permissions Required Vendor Advisory |
| https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=510922943 | Vendor Advisory |
| http://www.securityfocus.com/bid/106987 | Third Party Advisory VDB Entry |
| https://launchpad.support.sap.com/#/notes/2723570 | Permissions Required Vendor Advisory |
| https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=510922943 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 04:16
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://www.securityfocus.com/bid/106987 - Third Party Advisory, VDB Entry | |
| References | () https://launchpad.support.sap.com/#/notes/2723570 - Permissions Required, Vendor Advisory | |
| References | () https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=510922943 - Vendor Advisory |
Information
Published : 2019-02-15 18:29
Updated : 2024-11-21 04:16
NVD link : CVE-2019-0255
Mitre link : CVE-2019-0255
CVE.ORG link : CVE-2019-0255
JSON object : View
Products Affected
sap
- advanced_business_application_programming_platform_krnl64uc
- advanced_business_application_programming_platform_krnl64nuc
- advanced_business_application_programming_platform_kernel
CWE
CWE-20
Improper Input Validation