Description (CNA)
SAP NetWeaver allows an authenticated non-administrative user to call the remote-enabled function module which could grants access to non-sensitive information about the SAP system and OS without requiring any specific knowledge or controlled conditions. This leads to a low impact on confidentiality with no effect on integrity or availability of the application.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| SAP_SE / SAP NetWeaver (RFC enabled function module) | affected SAP_BW 700; affected 701; affected 702; affected 710; affected 731; affected 740; affected 750; affected 751; affected 752; affected 753; affected 754; affected 755; affected 756; affected 757; affected 758; affected 816; affected 914; affected 916 |
CWE
CWE-862
References
ADP enrichment
No English description supplied.
No references supplied.