CVE-2019-0270

ABAP Server of SAP NetWeaver and ABAP Platform fail to perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. This has been corrected in the following versions: KRNL32NUC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL32UC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL64N...

CVE-2019-0270

ABAP Server of SAP NetWeaver and ABAP Platform fail to perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. This has been corrected in the following versions: KRNL32NUC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL32UC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL64N...

CVE-2019-0270

ABAP Server of SAP NetWeaver and ABAP Platform fail to perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. This has been corrected in the following versions: KRNL32NUC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL32UC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL64N...

CVE-2019-0270

SAP NetWeaver ABAP Server and ABAP Platform were vulnerable to privilege escalation due to missing authorization checks for authenticated users. Affected components: ABAP Server (NetWeaver/ABAP Platform). Root cause: inadequate authorization validation enabling privilege escalation. The vulnerabi...

CVE-2018-18815

The REST API component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO Jaspersoft for AWS with Multi-Tenancy, and TIBCO Jaspersoft Reporting and Analytics for AWS contains a vulnerability tha...

CVE-2019-0257

Customizing functionality of SAP NetWeaver AS ABAP Platform fixed in versions from 7.0 to 7.02, from 7.10 to 7.11, 7.30, 7.31, 7.40, from 7.50 to 7.53, from 7.74 to 7.75 does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges...

CVE-2019-0258

SAP Disclosure Management, version 10.01, does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges...

CVE-2019-0257

Customizing functionality of SAP NetWeaver AS ABAP Platform fixed in versions from 7.0 to 7.02, from 7.10 to 7.11, 7.30, 7.31, 7.40, from 7.50 to 7.53, from 7.74 to 7.75 does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges...

Authorization

SAP Disclosure Management, version 10.01, does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges...

CVE-2019-0258

CVE-2019-0258 affects SAP Disclosure Management, version 10.01. The vulnerability arises from insufficient authorization checks for an authenticated user, leading to privilege escalation. The public sources in the connected set describe this issue for the SAP Disclosure Management product but do ...

CVE-2019-0258

SAP Disclosure Management, version 10.01, does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges...

CVE-2019-0257

Customizing functionality of SAP NetWeaver AS ABAP Platform fixed in versions from 7.0 to 7.02, from 7.10 to 7.11, 7.30, 7.31, 7.40, from 7.50 to 7.53, from 7.74 to 7.75 does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges...

Information Leakage

Apache Hadoop HDFS is vulnerable to information leakage. When listXAttrs is used, the library misses the authorization checks for path-level read permissions, leaking extended attribute key/value pairs...

CVE-2018-2484

SAP Enterprise Financial Services fixed in SAPSCORE 1.13, 1.14, 1.15; S4CORE 1.01, 1.02, 1.03; EA-FINSERV 1.10, 2.0, 5.0, 6.0, 6.03, 6.04, 6.05, 6.06, 6.16, 6.17, 6.18, 8.0; Bank/CFM 4.6320 does not perform necessary authorization checks for an authenticated user, resulting in escalation of...

CVE-2019-0243

Under some circumstances, masterdata maintenance in SAP BW/4HANA fixed in DW4CORE version 1.0 SP08 does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges...

CVE-2019-0243

CVE-2019-0243 affects SAP BW/4HANA: masterdata maintenance can skip authorization checks for an authenticated user, enabling privilege escalation. Vulnerable component is masterdata maintenance in SAP BW/4HANA; fixed in DW4CORE version 1.0 (SP08). The issue implies unauthorized elevation of privi...

CVE-2018-2484

SAP Enterprise Financial Services fixed in SAPSCORE 1.13, 1.14, 1.15; S4CORE 1.01, 1.02, 1.03; EA-FINSERV 1.10, 2.0, 5.0, 6.0, 6.03, 6.04, 6.05, 6.06, 6.16, 6.17, 6.18, 8.0; Bank/CFM 4.6320 does not perform necessary authorization checks for an authenticated user, resulting in escalation of...

CVE-2019-0243

Under some circumstances, masterdata maintenance in SAP BW/4HANA fixed in DW4CORE version 1.0 SP08 does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges...

CVE-2018-15780

RSA Archer versions prior to 6.5.0.1 contain an improper access control vulnerability. A remote malicious user could potentially exploit this vulnerability to bypass authorization checks and gain read access to restricted user information...

CVE-2018-15780 DSA-2018-224: RSA Archer GRC Platform Improper Access Control Vulnerability

RSA Archer versions prior to 6.5.0.1 contain an improper access control vulnerability. A remote malicious user could potentially exploit this vulnerability to bypass authorization checks and gain read access to restricted user information...