Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2021-33671

Опубликовано: 14 июл. 2021
Источник: nvd
CVSS3: 7.6
CVSS3: 8.8
CVSS2: 6.5
EPSS Низкий

Описание

SAP NetWeaver Guided Procedures (Administration Workset), versions - 7.10, 7.20, 7.30, 7.31, 7.40, 7.50, does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. The impact of missing authorization could result to abuse of functionality restricted to a particular user group, and could allow unauthorized users to read, modify or delete restricted data.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:sap:netweaver_guided_procedures:7.10:*:*:*:*:*:*:*
cpe:2.3:a:sap:netweaver_guided_procedures:7.20:*:*:*:*:*:*:*
cpe:2.3:a:sap:netweaver_guided_procedures:7.30:*:*:*:*:*:*:*
cpe:2.3:a:sap:netweaver_guided_procedures:7.31:*:*:*:*:*:*:*
cpe:2.3:a:sap:netweaver_guided_procedures:7.40:*:*:*:*:*:*:*
cpe:2.3:a:sap:netweaver_guided_procedures:7.50:*:*:*:*:*:*:*

EPSS

Процентиль: 45%
0.00222
Низкий

7.6 High

CVSS3

8.8 High

CVSS3

6.5 Medium

CVSS2

Дефекты

CWE-862

Связанные уязвимости

github
больше 3 лет назад

SAP NetWeaver Guided Procedures (Administration Workset), versions - 7.10, 7.20, 7.30, 7.31, 7.40, 7.50, does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. The impact of missing authorization could result to abuse of functionality restricted to a particular user group, and could allow unauthorized users to read, modify or delete restricted data.

EPSS

Процентиль: 45%
0.00222
Низкий

7.6 High

CVSS3

8.8 High

CVSS3

6.5 Medium

CVSS2

Дефекты

CWE-862