CVE-2024-33005
Medium
Description
Due to the missing authorization checks in the local systems, the admin users of SAP Web Dispatcher, SAP NetWeaver Application Server (ABAP and Java), and SAP Content Server can impersonate other users and may perform some unintended actions. This could lead to a low impact on confidentiality and a high impact on the integrity and availability of the applications.
SeverityMedium
CVSS6.3
Exploit probability11. percentile0.2%
Product
Sap Netweaver Abap
PublishedAug 13, 2024
First seenAug 13, 2024
Weakness typeCWE-862Missing authorization
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sap netweaver_abap | kernel_7.22, kernel_7.53, kernel_7.54, kernel_7.77, kernel_7.85, kernel_7.89, kernel_7.93, krnl64nuc_7.22, krnl64nuc_7.22ext, krnl64uc_7.22, krnl64uc_7.22ext, krnl64uc_7.53 | — |
| sap netweaver_java | kernel_7.22, kernel_7.53, kernel_7.54, kernel_7.77, kernel_7.85, kernel_7.89, kernel_7.93, krnl64nuc_7.22, krnl64nuc_7.22ext, krnl64uc_7.22, krnl64uc_7.22ext, krnl64uc_7.53 | — |
| sap content_server | kernel_7.22, kernel_7.53, kernel_7.54, kernel_7.77, kernel_7.85, kernel_7.89, kernel_7.93, krnl64nuc_7.22, krnl64nuc_7.22ext, krnl64uc_7.22, krnl64uc_7.22ext, krnl64uc_7.53 | — |
| sap web_dispatcher | kernel_7.22, kernel_7.53, kernel_7.54, kernel_7.77, kernel_7.85, kernel_7.89, kernel_7.93, krnl64nuc_7.22, krnl64nuc_7.22ext, krnl64uc_7.22, krnl64uc_7.22ext, krnl64uc_7.53, webdisp_7.22_ext, webdisp_7.53, webdisp_7.54, webdisp_7.77, webdisp_7.85, webdisp_7.89, webdisp_7.93 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.