Description (CNA)
SAP NetWeaver ABAP Server and ABAP Platform - versions SAP_BASIS 700, 701, 702, 710, 711, 730, 731, 740, 750, 751, 752, 753, 754, 755, 756, 757, KERNEL 7.22, 7.53, 7.77, 7.81, 7.85, 7.89, KRNL64UC 7.22, 7.22EXT, 7.53, KRNL64NUC 7.22, 7.22EXT, creates information about system identity in an ambiguous format. This could lead to capture-replay vulnerability and may be exploited by malicious users to obtain illegitimate access to the system.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| SAP / NetWeaver ABAP Server and ABAP Platform | affected SAP_BASIS 701; affected SAP_BASIS 702; affected SAP_BASIS 710; affected SAP_BASIS 711; affected SAP_BASIS 730; affected SAP_BASIS 731; affected SAP_BASIS 740; affected SAP_BASIS 750; affected SAP_BASIS 751; affected SAP_BASIS 752; affected SAP_BASIS 753; affected SAP_BASIS 754; affected SAP_BASIS 755; affected SAP_BASIS 756; affected SAP_BASIS 757; affected KERNEL 7.22; affected KERNEL 7.53; affected KERNEL 7.77; affected KERNEL 7.81; affected KERNEL 7.85; affected KERNEL 7.89; affected KRNL64UC 7.22; affected KRNL64UC 7.22EXT; affected KRNL64UC 7.53; affected KRNL64NUC 7.22; affected KRNL64NUC 7.22EXT |
CWE
CWE-294
References
- https://launchpad.support.sap.com/#/notes/3089413
- https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.