CVE-2021-27603

Опубликовано: 13 апр. 2021

Источник: nvd

CVSS3: 6.5

CVSS2: 4

EPSS Низкий

Описание

An RFC enabled function module SPI_WAIT_MILLIS in SAP NetWeaver AS ABAP, versions - 731, 740, 750, allows to keep a work process busy for any length of time. An attacker could call this function module multiple times to block all work processes thereby causing Denial of Service and affecting the Availability of the SAP system.

Ссылки

https://launchpad.support.sap.com/#/notes/3028729
Permissions Required
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=573801649
Vendor Advisory
https://launchpad.support.sap.com/#/notes/3028729
Permissions Required
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=573801649
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:sap:netweaver_application_server_abap:731:*:*:*:*:*:*:*

cpe:2.3:a:sap:netweaver_application_server_abap:740:*:*:*:*:*:*:*

cpe:2.3:a:sap:netweaver_application_server_abap:750:*:*:*:*:*:*:*

EPSS

Процентиль: 63%

0.00448

Низкий

6.5 Medium

CVSS3

6.5 Medium

CVSS3

4 Medium

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

GHSA-7vfx-38v2-mc63

CVSS3: 6.5

github

больше 3 лет назад

EPSS

Процентиль: 63%

0.00448

Низкий

6.5 Medium

CVSS3

6.5 Medium

CVSS3

4 Medium

CVSS2

Дефекты

NVD-CWE-noinfo