Description (CNA)
SAP Kernel (ABAP Debugger), versions KRNL32NUC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL32UC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL64NUC 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49, KRNL64UC 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49, 7.73, KERNEL 7.21, 7.49, 7.53, 7.73, 7.75, 7.76, 7.77, allows a user to execute “Go to statement” without possessing the authorization S_DEVELOP DEBUG 02, resulting in Missing Authorization Check
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| SAP SE / SAP Kernel (KRNL32NUC) | affected < 7.21; affected < 7.21EXT; affected < 7.22; affected < 7.22EXT |
| SAP SE / SAP Kernel (KRNL32UC) | affected < 7.21; affected < 7.21EXT; affected < 7.22; affected < 7.22EXT |
| SAP SE / SAP Kernel (KRNL64NUC) | affected < 7.21; affected < 7.21EXT; affected < 7.22; affected < 7.22EXT; affected < 7.49 |
| SAP SE / SAP Kernel (KRNL64UC) | affected < 7.21; affected < 7.21EXT; affected < 7.22; affected < 7.22EXT; affected < 7.49; affected < 7.73 |
| SAP SE / SAP Kernel (KERNEL) | affected < 7.21; affected < 7.49; affected < 7.53; affected < 7.73; affected < 7.75; affected < 7.76; affected < 7.77 |
CWE
No CWE identifiers supplied.
References
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=523998017
- https://launchpad.support.sap.com/#/notes/2798743
ADP enrichment
No English description supplied.