CVE-2018-2494

Summary

Necessary authorization checks for an authenticated user, resulting in escalation of privileges, have been fixed in SAP Basis AS ABAP of SAP NetWeaver 700 to 750, from 750 onwards delivered as ABAP Platform.

Affected Software

VendorProductVersion RangeStatus
SAPSAP Basis (AS ABAP of SAP NetWeaver)= 7.00 to 7.02affected
SAPSAP Basis (AS ABAP of SAP NetWeaver)= 7.10 to 7.30affected
SAPSAP Basis (AS ABAP of SAP NetWeaver)= 7.31affected
SAPSAP Basis (AS ABAP of SAP NetWeaver)= 7.40affected
SAPSAP Basis (ABAP Platform)= 7.50 to 7.53affected

Weaknesses

  • Missing Authorization Check

ADP Enrichment

CVE Program Container

Additional References

References