CVEvulnerability

CVE-2018-2494

8.0 HIGH Published 2018-12-11 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2018-12-11
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
8.0 HIGH — CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
6.5 MEDIUM — AV:N/AC:L/Au:S/C:P/I:P/A:P
Weaknesses
CWE-863

Description

Necessary authorization checks for an authenticated user, resulting in escalation of privileges, have been fixed in SAP Basis AS ABAP of SAP NetWeaver 700 to 750, from 750 onwards delivered as ABAP Platform.

Affected configurations

• sap business application software integrated solution (>= 7.00 <= 7.02) • sap business application software integrated solution (>= 7.10 <= 7.30) • sap business application software integrated solution (>= 7.50 <= 7.53) • sap business application software integrated solution 7.31 • sap business application software integrated solution 7.40

Related

Weakness · CWE (1)

  • CWE-863 Incorrect Authorization weakness

References