Improper access control

2020-11-1017:15:00

PRIOn knowledge base

www.prio-n.com

8.4 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

37.0%

JSON

SAP NetWeaver AS ABAP (Web Dynpro), versions - 731, 740, 750, 751, 752, 753, 754, 755, 782, allows an authenticated user to access Web Dynpro components, that allows them to read and delete database logfiles because of Improper Access Control.

CPENameOperatorVersion
netweaver_application_server_abapeq750
netweaver_application_server_abapeq752
netweaver_application_server_abapeq753
netweaver_application_server_abapeq754
netweaver_application_server_abapeq755
netweaver_application_server_abapeq731
netweaver_application_server_abapeq740
netweaver_application_server_abapeq751
netweaver_application_server_abapeq782

Name	Operator	Version
netweaver_application_server_abap	eq	750
netweaver_application_server_abap	eq	752
netweaver_application_server_abap	eq	753
netweaver_application_server_abap	eq	754
netweaver_application_server_abap	eq	755
netweaver_application_server_abap	eq	731
netweaver_application_server_abap	eq	740
netweaver_application_server_abap	eq	751
netweaver_application_server_abap	eq	782