QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2019-0270

Back to search

CVE-2019-0270

Published: Mar 12, 2019

Modified: Aug 4, 2024

PUBLISHED

Description

ABAP Server of SAP NetWeaver and ABAP Platform fail to perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. This has been corrected in the following versions: KRNL32NUC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL32UC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL64NUC 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49, 7.74, KRNL64UC 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49, 7.73, 7.74, 8.04, KERNEL 7.21, 7.45, 7.49, 7.53, 7.73, 7.74, 7.75, 8.04.

VendorProductVersions

SAP SE

ABAP Platform & Server (KRNL32NUC)

affected
< 7.21
affected
< 7.21EXT
affected
< 7.22
affected
< 7.22EXT

SAP SE

ABAP Platform & Server (KRNL32UC)

affected
< 7.21
affected
< 7.21EXT
affected
< 7.22
affected
< 7.22EXT

SAP SE

ABAP Platform & Server (KRNL64NUC)

affected
< 7.21
affected
< 7.21EXT
affected
< 7.22
affected
< 7.22EXT
affected
< 7.49

+1 more versions

SAP SE

ABAP Platform & Server (KRNL64UC)

affected
< 7.21
affected
< 7.21EXT
affected
< 7.22
affected
< 7.22EXT
affected
< 7.49

+3 more versions

SAP SE

ABAP Platform & Server (KERNEL)

affected
< 7.21
affected
< 7.45
affected
< 7.49
affected
< 7.53
affected
< 7.73

+3 more versions

References

107377
vdb-entry
x_refsource_BID

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now