CVE-2019-0349
Published: Aug 14, 2019
Modified: Aug 4, 2024
Description
SAP Kernel (ABAP Debugger), versions KRNL32NUC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL32UC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL64NUC 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49, KRNL64UC 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49, 7.73, KERNEL 7.21, 7.49, 7.53, 7.73, 7.75, 7.76, 7.77, allows a user to execute “Go to statement” without possessing the authorization S_DEVELOP DEBUG 02, resulting in Missing Authorization Check
| Vendor | Product | Versions |
|---|---|---|
SAP SE | SAP Kernel (KRNL32NUC) | affected < 7.21affected < 7.21EXTaffected < 7.22affected < 7.22EXT |
SAP SE | SAP Kernel (KRNL32UC) | affected < 7.21affected < 7.21EXTaffected < 7.22affected < 7.22EXT |
SAP SE | SAP Kernel (KRNL64NUC) | affected < 7.21affected < 7.21EXTaffected < 7.22affected < 7.22EXTaffected < 7.49 |
SAP SE | SAP Kernel (KRNL64UC) | affected < 7.21affected < 7.21EXTaffected < 7.22affected < 7.22EXTaffected < 7.49+1 more versions |
SAP SE | SAP Kernel (KERNEL) | affected < 7.21affected < 7.49affected < 7.53affected < 7.73affected < 7.75+2 more versions |
References
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now