Vulnerability Description
Customizing functionality of SAP NetWeaver AS ABAP Platform (fixed in versions from 7.0 to 7.02, from 7.10 to 7.11, 7.30, 7.31, 7.40, from 7.50 to 7.53, from 7.74 to 7.75) does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Sap | Netweaver Application Server Abap | >= 7.0, <= 7.02 |
| Sap | Netweaver As Abap | >= 7.10, <= 7.11 |
Related Weaknesses (CWE)
References
- http://www.securityfocus.com/bid/106999Third Party AdvisoryVDB Entry
- https://launchpad.support.sap.com/#/notes/2728839Permissions RequiredVendor Advisory
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=510922943Broken LinkVendor Advisory
- http://www.securityfocus.com/bid/106999Third Party AdvisoryVDB Entry
- https://launchpad.support.sap.com/#/notes/2728839Permissions RequiredVendor Advisory
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=510922943Broken LinkVendor Advisory
FAQ
What is CVE-2019-0257?
CVE-2019-0257 is a vulnerability with a CVSS score of 8.8 (HIGH). Customizing functionality of SAP NetWeaver AS ABAP Platform (fixed in versions from 7.0 to 7.02, from 7.10 to 7.11, 7.30, 7.31, 7.40, from 7.50 to 7.53, from 7.74 to 7.75) does not perform necessary a...
How severe is CVE-2019-0257?
CVE-2019-0257 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2019-0257?
Check the references section above for vendor advisories and patch information. Affected products include: Sap Netweaver Application Server Abap, Sap Netweaver As Abap.