CVE-2024-33005CWE-862

Missing Authorization check in SAP NetWeaver Application Server (ABAP and Java),SAP Web Dispatcher and SAP Content Server

Medium · published August 13, 2024

CVSS v3.1
6.3
EPSS
0%
Percentile
10.3
In the wild
Unconfirmed
What it is

Due to the missing authorization checks in the

local systems, the admin users of SAP Web Dispatcher, SAP NetWeaver Application

Server (ABAP and Java), and SAP Content Server can impersonate other users and

may perform some unintended actions. This could lead to a low impact on

confidentiality and a high impact on the integrity and availability of the

applications.

The record
Technical detail
CVSS v3.1
6.3 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00208 · 10.3th percentile
Weakness
CWE-862 · Missing Authorization
Published
2024-08-13T03:47Z
EPSS history
Timeline
  • 13 AUG 03:47Z
    Missing Authorization check in SAP NetWeaver Application Server (ABAP and Java),SAP Web Dispatcher and SAP Content Server
    cvelistv5