CVE-2021-27609

SAP Focused RUN versions 200, 300, does not perform necessary authorization checks for an authenticated user, which allows a user to call the oData service and…

Medium · published April 13, 2021

CVSS v3.0
4.6
EPSS
1%
Percentile
43.0
In the wild
Unconfirmed
What it is

SAP Focused RUN versions 200, 300, does not perform necessary authorization checks for an authenticated user, which allows a user to call the oData service and manipulate the activation for the SAP EarlyWatch Alert service data collection and sending to SAP without the intended authorization.

The record
Technical detail
CVSS v3.0
4.6 · MEDIUM
Vector
CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00515 · 43.0th percentile
Published
2021-04-13T18:45Z
EPSS history
Timeline
  • 13 APR 18:45Z
    SAP Focused RUN versions 200, 300, does not perform necessary authorization checks for an authenticated user, which allows a user to call the oData service and…
    cvelistv5