VYPR
← All advisories
Unrated severityNVD Advisory· Published Oct 12, 2021· Updated Aug 4, 2024

CVE-2021-38178

CVE-2021-38178

Description

The software logistics system of SAP NetWeaver AS ABAP and ABAP Platform versions - 700, 701, 702, 710, 730, 731, 740, 750, 751, 752, 753, 754, 755, 756, enables a malicious user to transfer ABAP code artifacts or content, by-passing the established quality gates. By this vulnerability malicious code can reach quality and production, and can compromise the confidentiality, integrity, and availability of the system and its data.

Affected products

3
  • SAP/Netweaver Abapllm-fuzzy
    Range: = 700, 701, 702, 710, 730, 731, 740, 750, 751, 752, 753, 754, 755, 756
  • SAP/ABAP Platformllm-fuzzy
    Range: = 700, 701, 702, 710, 730, 731, 740, 750, 751, 752, 753, 754, 755, 756
  • SAP SE/SAP NetWeaver AS ABAP and ABAP Platformv5
    Range: < 700

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.