VYPR
← All advisories
Medium severity6.3NVD Advisory· Published Aug 13, 2024· Updated Jun 17, 2026

CVE-2024-33005

CVE-2024-33005

Description

Due to the missing authorization checks in the local systems, the admin users of SAP Web Dispatcher, SAP NetWeaver Application Server (ABAP and Java), and SAP Content Server can impersonate other users and may perform some unintended actions. This could lead to a low impact on confidentiality and a high impact on the integrity and availability of the applications.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

60
  • SAP/Sap Netweaver Application Server (abap And Java),sap Web Dispatcher And Sap Content Serverv5
    Range: KRNL64NUC 7.22
  • SAP/Netweaver Application Server Javallm-fuzzy
  • SAP/Web Dispatcherllm-fuzzy20 versions
    (expand)+ 19 more
    • (no CPE)
    • cpe:2.3:a:sap:web_dispatcher:kernel_7.22:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:web_dispatcher:kernel_7.53:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:web_dispatcher:kernel_7.54:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:web_dispatcher:kernel_7.77:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:web_dispatcher:kernel_7.85:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:web_dispatcher:kernel_7.89:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:web_dispatcher:kernel_7.93:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:web_dispatcher:krnl64nuc_7.22:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:web_dispatcher:krnl64nuc_7.22ext:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:web_dispatcher:krnl64uc_7.22:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:web_dispatcher:krnl64uc_7.22ext:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:web_dispatcher:krnl64uc_7.53:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:web_dispatcher:webdisp_7.22_ext:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:web_dispatcher:webdisp_7.53:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:web_dispatcher:webdisp_7.54:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:web_dispatcher:webdisp_7.77:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:web_dispatcher:webdisp_7.85:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:web_dispatcher:webdisp_7.89:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:web_dispatcher:webdisp_7.93:*:*:*:*:*:*:*
  • SAP/NetWeaver Application Server for ABAPllm-fuzzy
  • SAP/Content Serverllm-fuzzy13 versions
    (expand)+ 12 more
    • (no CPE)
    • cpe:2.3:a:sap:content_server:kernel_7.22:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:content_server:kernel_7.53:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:content_server:kernel_7.54:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:content_server:kernel_7.77:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:content_server:kernel_7.85:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:content_server:kernel_7.89:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:content_server:kernel_7.93:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:content_server:krnl64nuc_7.22:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:content_server:krnl64nuc_7.22ext:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:content_server:krnl64uc_7.22:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:content_server:krnl64uc_7.22ext:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:content_server:krnl64uc_7.53:*:*:*:*:*:*:*
  • SAP/Netweaver Abap12 versions
    cpe:2.3:a:sap:netweaver_abap:kernel_7.22:*:*:*:*:*:*:*+ 11 more
    • cpe:2.3:a:sap:netweaver_abap:kernel_7.22:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_abap:kernel_7.53:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_abap:kernel_7.54:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_abap:kernel_7.77:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_abap:kernel_7.85:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_abap:kernel_7.89:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_abap:kernel_7.93:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_abap:krnl64nuc_7.22:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_abap:krnl64nuc_7.22ext:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_abap:krnl64uc_7.22:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_abap:krnl64uc_7.22ext:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_abap:krnl64uc_7.53:*:*:*:*:*:*:*
  • SAP/Netweaver Java12 versions
    cpe:2.3:a:sap:netweaver_java:kernel_7.22:*:*:*:*:*:*:*+ 11 more
    • cpe:2.3:a:sap:netweaver_java:kernel_7.22:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_java:kernel_7.53:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_java:kernel_7.54:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_java:kernel_7.77:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_java:kernel_7.85:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_java:kernel_7.89:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_java:kernel_7.93:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_java:krnl64nuc_7.22:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_java:krnl64nuc_7.22ext:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_java:krnl64uc_7.22:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_java:krnl64uc_7.22ext:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:netweaver_java:krnl64uc_7.53:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.