CVE-2021-27610
9
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Summary
SAP NetWeaver ABAP Server and ABAP Platform, versions - 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 804, does not create information about internal and external RFC user in consistent and distinguished format, which could lead to improper authentication and may be exploited by malicious users to obtain illegitimate access to the system.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| SAP SE | SAP NetWeaver AS ABAP and ABAP Platform | < 700 | affected |
| SAP SE | SAP NetWeaver AS ABAP and ABAP Platform | < 701 | affected |
| SAP SE | SAP NetWeaver AS ABAP and ABAP Platform | < 702 | affected |
| SAP SE | SAP NetWeaver AS ABAP and ABAP Platform | < 731 | affected |
| SAP SE | SAP NetWeaver AS ABAP and ABAP Platform | < 740 | affected |
| SAP SE | SAP NetWeaver AS ABAP and ABAP Platform | < 750 | affected |
| SAP SE | SAP NetWeaver AS ABAP and ABAP Platform | < 751 | affected |
| SAP SE | SAP NetWeaver AS ABAP and ABAP Platform | < 752 | affected |
| SAP SE | SAP NetWeaver AS ABAP and ABAP Platform | < 753 | affected |
| SAP SE | SAP NetWeaver AS ABAP and ABAP Platform | < 754 | affected |
| SAP SE | SAP NetWeaver AS ABAP and ABAP Platform | < 755 | affected |
| SAP SE | SAP NetWeaver AS ABAP and ABAP Platform | < 804 | affected |
Weaknesses
- Improper Authentication
ADP Enrichment
CVE Program Container
Additional References
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=578125999
- https://launchpad.support.sap.com/#/notes/3007182
References
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=578125999
- https://launchpad.support.sap.com/#/notes/3007182
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.