CVEvulnerability

CVE-2021-21468

6.5 MEDIUM Published 2021-01-12 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2021-01-12
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS 3.0 ([email protected])
6.5 MEDIUM — CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS 2.0 ([email protected])
4.0 MEDIUM — AV:N/AC:L/Au:S/C:P/I:N/A:N
Weaknesses
CWE-862

Description

The BW Database Interface does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges that allows the user to practically read out any database table.

Affected configurations

• sap business warehouse 710 • sap business warehouse 711 • sap business warehouse 730 • sap business warehouse 731 • sap business warehouse 740 • sap business warehouse 750 • sap business warehouse 751 • sap business warehouse 752 • sap business warehouse 753 • sap business warehouse 754 • sap business warehouse 755 • sap business warehouse 782

Related

Weakness · CWE (1)

  • CWE-862 Missing Authorization weakness

References