CVE-2023-41367: Missing Authentication for Critical Function

Due to missing authentication check in webdynpro application, an unauthorized user in SAP NetWeaver Guided Procedures - version 7.50, can gain access to admin view of specific function anonymously. On successful exploitation of vulnerability under specific circumstances, attacker can view user’s...

PT-2023-27930

Name of the Vulnerable Software and Affected Versions SAP NetWeaver Guided Procedures version 7.50 Description The issue is caused by a missing authentication check in the webdynpro application, allowing an unauthorized user to gain access to the admin view of a specific function anonymously. Und...

Authorization

SAP NetWeaver Guided Procedures Administration Workset, versions - 7.10, 7.20, 7.30, 7.31, 7.40, 7.50, does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. The impact of missing authorization could result to abuse of functionality...

CVE-2021-33671: Missing Authorization

SAP NetWeaver Guided Procedures Administration Workset, versions - 7.10, 7.20, 7.30, 7.31, 7.40, 7.50, does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. The impact of missing authorization could result to abuse of functionality...

PT-2021-20249

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver Guided Procedures Administration Workset versions 7.10 through 7.50 Description: The issue results from the lack of necessary authorization checks for an authenticated user, leading to escalation of privileges. This could allow...

PT-2020-18990

Name of the Vulnerable Software and Affected Versions SAP NetWeaver Guided Procedures versions 7.10 through 7.50 Description The issue arises from insufficient validation of an XML document input from a compromised admin, leading to Denial of Service. Recommendations For SAP NetWeaver Guided...