CVEvulnerability

CVE-2019-0255

8.1 HIGH Published 2019-02-15 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2019-02-15
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
8.1 HIGH — CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
CVSS 2.0 ([email protected])
5.5 MEDIUM — AV:N/AC:L/Au:S/C:P/I:P/A:N
Weaknesses
CWE-20

Description

SAP NetWeaver AS ABAP Platform, Krnl64nuc 7.74, krnl64UC 7.73, 7.74, Kernel 7.73, 7.74, 7.75, fails to validate type of installation for an ABAP Server system correctly. That behavior may lead to situation, where business user achieves access to the full SAP Menu, that is 'Easy Access Menu'. The situation can be misused by any user to leverage privileges to business functionality.

Affected configurations

• sap advanced business application programming platform kernel 7.73 • sap advanced business application programming platform kernel 7.74 • sap advanced business application programming platform kernel 7.75. • sap advanced business application programming platform krnl64nuc 7.74 • sap advanced business application programming platform krnl64uc 7.73 • sap advanced business application programming platform krnl64uc 7.74

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References