Lucene search

CVE-2021-21469

🗓️ 12 Jan 2021 15:16:15Reported by sapType

cve🔗 web.nvd.nist.gov👁 35 Views🌐 4 Media mentions

When security guidelines for SAP NetWeaver Master Data Management on Windows are not reviewed thoroughly, an external operator could set custom paths in the MDS server configuration, potentially leading to an information disclosure risk due to a SMB relay attack

Reporter	Title	Published	Views	Family All 3
Prion	Information disclosure	12 Jan 202115:15	–	prion
NVD	CVE-2021-21469	12 Jan 202115:15	–	nvd
Cvelist	CVE-2021-21469	12 Jan 202114:44	–	cvelist

Nvd

Node

sap netweaver_master_data_managementMatch7.10

sap netweaver_master_data_managementMatch7.10.750

sap netweaver_master_data_managementMatch710

[
  {
    "product": "SAP NetWeaver Master Data Management",
    "vendor": "SAP SE",
    "versions": [
      {
        "status": "affected",
        "version": "< 7.10"
      },
      {
        "status": "affected",
        "version": "< 710"
      },
      {
        "status": "affected",
        "version": "< 710.750"
      }
    ]
  }
]

Source	Link
launchpad	www.launchpad.support.sap.com/
wiki	www.wiki.scn.sap.com/wiki/pages/viewpage.action

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

12 Jan 2021 15:15Current

7.6High risk

Vulners AI Score7.6

CVSS25.0

CVSS37.5

EPSS0.002

CWE-200