CVEvulnerability

CVE-2024-33005

6.3 MEDIUM Published 2024-08-13 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2024-08-13
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.3 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:H
CVSS 3.1 ([email protected])
6.3 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:H
Weaknesses
CWE-862

Description

Due to the missing authorization checks in the local systems, the admin users of SAP Web Dispatcher, SAP NetWeaver Application Server (ABAP and Java), and SAP Content Server can impersonate other users and may perform some unintended actions. This could lead to a low impact on confidentiality and a high impact on the integrity and availability of the applications.

Affected configurations

• sap netweaver abap kernel 7.22 • sap netweaver abap kernel 7.53 • sap netweaver abap kernel 7.54 • sap netweaver abap kernel 7.77 • sap netweaver abap kernel 7.85 • sap netweaver abap kernel 7.89 • sap netweaver abap kernel 7.93 • sap netweaver abap krnl64nuc 7.22 • sap netweaver abap krnl64nuc 7.22ext • sap netweaver abap krnl64uc 7.22 • sap netweaver abap krnl64uc 7.22ext • sap netweaver abap krnl64uc 7.53 • sap netweaver java kernel 7.22 • sap netweaver java kernel 7.53 • sap netweaver java kernel 7.54 • sap netweaver java kernel 7.77 • sap netweaver java kernel 7.85 • sap netweaver java kernel 7.89 • sap netweaver java kernel 7.93 • sap netweaver java krnl64nuc 7.22 • sap netweaver java krnl64nuc 7.22ext • sap netweaver java krnl64uc 7.22 • sap netweaver java krnl64uc 7.22ext • sap netweaver java krnl64uc 7.53 • sap content server kernel 7.22 • sap content server kernel 7.53 • sap content server kernel 7.54 • sap content server kernel 7.77 • sap content server kernel 7.85 • sap content server kernel 7.89 • sap content server kernel 7.93 • sap content server krnl64nuc 7.22 • sap content server krnl64nuc 7.22ext • sap content server krnl64uc 7.22 • sap content server krnl64uc 7.22ext • sap content server krnl64uc 7.53 • sap web dispatcher kernel 7.22 • sap web dispatcher kernel 7.53 • sap web dispatcher kernel 7.54 • sap web dispatcher kernel 7.77 • sap web dispatcher kernel 7.85 • sap web dispatcher kernel 7.89 • sap web dispatcher kernel 7.93 • sap web dispatcher krnl64nuc 7.22 • sap web dispatcher krnl64nuc 7.22ext • sap web dispatcher krnl64uc 7.22 • sap web dispatcher krnl64uc 7.22ext • sap web dispatcher krnl64uc 7.53 • sap web dispatcher webdisp 7.22 ext • sap web dispatcher webdisp 7.53 • sap web dispatcher webdisp 7.54 • sap web dispatcher webdisp 7.77 • sap web dispatcher webdisp 7.85 • sap web dispatcher webdisp 7.89 • sap web dispatcher webdisp 7.93

Related

Weakness · CWE (1)

  • CWE-862 Missing Authorization weakness

References