CVE-2021-44233

2021-12-1415:44:08

CWE-862

sap

www.cve.org

sap grc

access control

authorization

flaw

escalation of privileges

AI Score

Confidence

High

EPSS

0.001

Percentile

36.9%

JSON

SAP GRC Access Control - versions V1100_700, V1100_731, V1200_750, does not perform necessary authorization checks for an authenticated user, which could lead to escalation of privileges.

CNA Affected

[
  {
    "product": "SAP GRC Access Control",
    "vendor": "SAP SE",
    "versions": [
      {
        "status": "affected",
        "version": "< V1100_700"
      },
      {
        "status": "affected",
        "version": "< V1100_731"
      },
      {
        "status": "affected",
        "version": "< V1200_750"
      }
    ]
  }
]