Privilege Escalation in SAP NetWeaver AS ABAP Platform

Privilege Escalation in SAP NetWeaver AS ABAP Platform

CVE-2019-0257 · HIGH Severity

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Customizing functionality of SAP NetWeaver AS ABAP Platform (fixed in versions from 7.0 to 7.02, from 7.10 to 7.11, 7.30, 7.31, 7.40, from 7.50 to 7.53, from 7.74 to 7.75) does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges.

Learn more about our User Device Pen Test.