Lucene search

K
nvd[email protected]NVD:CVE-2019-0270
HistoryMar 12, 2019 - 10:29 p.m.

CVE-2019-0270

2019-03-1222:29:00
CWE-862
web.nvd.nist.gov
3

CVSS2

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

8.9

Confidence

High

EPSS

0.003

Percentile

68.4%

ABAP Server of SAP NetWeaver and ABAP Platform fail to perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. This has been corrected in the following versions: KRNL32NUC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL32UC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL64NUC 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49, 7.74, KRNL64UC 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49, 7.73, 7.74, 8.04, KERNEL 7.21, 7.45, 7.49, 7.53, 7.73, 7.74, 7.75, 8.04.

Affected configurations

Nvd
Node
sapadvanced_business_application_programming_platform_kernelMatch7.15
OR
sapadvanced_business_application_programming_platform_kernelMatch7.21
OR
sapadvanced_business_application_programming_platform_kernelMatch7.22
OR
sapadvanced_business_application_programming_platform_kernelMatch7.49
OR
sapadvanced_business_application_programming_platform_kernelMatch7.53
OR
sapadvanced_business_application_programming_platform_kernelMatch7.73
OR
sapadvanced_business_application_programming_platform_kernelMatch7.74
OR
sapadvanced_business_application_programming_platform_kernelMatch7.75
OR
sapadvanced_business_application_programming_platform_kernelMatch8.04
OR
sapadvanced_business_application_programming_platform_krnl32nucMatch7.21
OR
sapadvanced_business_application_programming_platform_krnl32nucMatch7.21ext
OR
sapadvanced_business_application_programming_platform_krnl32nucMatch7.22
OR
sapadvanced_business_application_programming_platform_krnl32nucMatch7.22ext
OR
sapadvanced_business_application_programming_platform_krnl32ucMatch7.21
OR
sapadvanced_business_application_programming_platform_krnl32ucMatch7.21ext
OR
sapadvanced_business_application_programming_platform_krnl32ucMatch7.22
OR
sapadvanced_business_application_programming_platform_krnl32ucMatch7.22ext
OR
sapadvanced_business_application_programming_platform_krnl64nucMatch7.21
OR
sapadvanced_business_application_programming_platform_krnl64nucMatch7.21ext
OR
sapadvanced_business_application_programming_platform_krnl64nucMatch7.22
OR
sapadvanced_business_application_programming_platform_krnl64nucMatch7.22ext
OR
sapadvanced_business_application_programming_platform_krnl64ucMatch7.21
OR
sapadvanced_business_application_programming_platform_krnl64ucMatch7.21ext
OR
sapadvanced_business_application_programming_platform_krnl64ucMatch7.22
OR
sapadvanced_business_application_programming_platform_krnl64ucMatch7.22ext
OR
sapadvanced_business_application_programming_platform_krnl64ucMatch7.49
OR
sapadvanced_business_application_programming_platform_krnl64ucMatch7.73
OR
sapadvanced_business_application_programming_platform_krnl64ucMatch7.74
OR
sapadvanced_business_application_programming_platform_krnl64ucMatch8.04

CVSS2

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

8.9

Confidence

High

EPSS

0.003

Percentile

68.4%

Related for NVD:CVE-2019-0270