CVE-2021-38178: SAP SE SAP NetWeaver AS ABAP and ABAP Platform

Описание

Оригинално описание

The software logistics system of SAP NetWeaver AS ABAP and ABAP Platform versions - 700, 701, 702, 710, 730, 731, 740, 750, 751, 752, 753, 754, 755, 756, enables a malicious user to transfer ABAP code artifacts or content, by-passing the established quality gates. By this vulnerability malicious code can reach quality and production, and can compromise the confidentiality, integrity, and availability of the system and its data.

Засегнати продукти

• SAP SE SAP NetWeaver AS ABAP and ABAP Platform: < 700; < 701; < 702; < 710; < 730; < 731; < 740; < 750; < 751; < 752; < 753; < 754; < 755; < 756

История

Други уязвимости в SAP SE SAP NetWeaver AS ABAP and ABAP Platform

• CVE-2021-40496
• CVE-2021-40495
• CVE-2021-38181
• 5.3CVE-2021-33684
• 6.5CVE-2021-33677

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2021-38178
• https://nvd.nist.gov/vuln/detail/CVE-2021-38178
• https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=587169983
• https://launchpad.support.sap.com/#/notes/3097887