8.8
CVE-2022-29611
- EPSS 0.77%
- Veröffentlicht 11.05.2022 15:15:09
- Zuletzt bearbeitet 21.11.2024 06:59:25
- Erkennungen
LoginSAP NetWeaver Application Server for ABAP and ABAP Platform do not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
SAP ≫ Netweaver Application Server Abap Version 700
SAP ≫ Netweaver Application Server Abap Version 701
SAP ≫ Netweaver Application Server Abap Version 702
SAP ≫ Netweaver Application Server Abap Version 710
SAP ≫ Netweaver Application Server Abap Version 711
SAP ≫ Netweaver Application Server Abap Version 730
SAP ≫ Netweaver Application Server Abap Version 731
SAP ≫ Netweaver Application Server Abap Version 740
SAP ≫ Netweaver Application Server Abap Version 750
SAP ≫ Netweaver Application Server Abap Version 751
SAP ≫ Netweaver Application Server Abap Version 752
SAP ≫ Netweaver Application Server Abap Version 753
SAP ≫ Netweaver Application Server Abap Version 754
SAP ≫ Netweaver Application Server Abap Version 755
SAP ≫ Netweaver Application Server Abap Version 756
SAP ≫ Netweaver Application Server Abap Version 787
SAP ≫ Netweaver Application Server Abap Version 788
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.77% | 0.519 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 8.8 | 2.8 | 5.9 |
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
|
| NIST | 6.5 | 8 | 6.4 |
AV:N/AC:L/Au:S/C:P/I:P/A:P
|
CWE-862 Missing Authorization
The product does not perform an authorization check when an actor attempts to access a resource or perform an action.
https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html
https://launchpad.support.sap.com/#/notes/3165801