Authorization

2021-06-0914:15:00

PRIOn knowledge base

www.prio-n.com

6.4 Medium

AI Score

Confidence

High

0.009 Low

EPSS

Percentile

82.6%

JSON

SAP NetWeaver AS ABAP and ABAP Platform, versions - 700, 702, 710, 711, 730, 731, 740, 750, 751, 752, 753, 754, 755, contains function module SRM_RFC_SUBMIT_REPORT which fails to validate authorization of an authenticated user thus allowing an unauthorized user to execute reports in SAP NetWeaver ABAP Platform.

CPENameOperatorVersion
netweaver_application_server_abapeq702
netweaver_application_server_abapeq750
netweaver_application_server_abapeq752
netweaver_application_server_abapeq753
netweaver_application_server_abapeq754
netweaver_application_server_abapeq755
netweaver_application_server_abapeq700
netweaver_application_server_abapeq710
netweaver_application_server_abapeq730
netweaver_application_server_abapeq731

Name	Operator	Version
netweaver_application_server_abap	eq	702
netweaver_application_server_abap	eq	750
netweaver_application_server_abap	eq	752
netweaver_application_server_abap	eq	753
netweaver_application_server_abap	eq	754
netweaver_application_server_abap	eq	755
netweaver_application_server_abap	eq	700
netweaver_application_server_abap	eq	710
netweaver_application_server_abap	eq	730
netweaver_application_server_abap	eq	731