CVE-2021-38182

2021-12-1415:44:13

sap

www.cve.org

kyma

input validation

authenticated users

privileges escalation

cluster compromise

AI Score

8.9

Confidence

High

EPSS

0.001

Percentile

38.1%

JSON

Due to insufficient input validation of Kyma, authenticated users can pass a Header of their choice and escalate privileges which can completely compromise the cluster.

CNA Affected

[
  {
    "product": "Kyma",
    "vendor": "SAP SE",
    "versions": [
      {
        "status": "affected",
        "version": "<1.24.7"
      }
    ]
  }
]