CVE-2021-40502CWE-862

SAP Commerce - versions 2105.3, 2011.13, 2005.18, 1905.34, does not perform necessary authorization checks for an authenticated user, resulting in escalation…

published November 10, 2021

CVSS
—
EPSS
1%
Percentile
57.1
In the wild
Unconfirmed
What it is

SAP Commerce - versions 2105.3, 2011.13, 2005.18, 1905.34, does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. Authenticated attackers will be able to access and edit data from b2b units they do not belong to.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00828 · 57.1th percentile
Weakness
CWE-862 · Missing Authorization
Published
2021-11-10T15:24Z
EPSS history
Timeline
  • 10 NOV 15:24Z
    SAP Commerce - versions 2105.3, 2011.13, 2005.18, 1905.34, does not perform necessary authorization checks for an authenticated user, resulting in escalation…
    cvelistv5