Home
HIGH: 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:HDefault status
unaffected
KERNEL 7.22
affected
KERNEL 7.53
affected
KERNEL 7.54
affected
KERNEL 7.77
affected
RNL64UC 7.22
affected
RNL64UC 7.22EXT
affected
RNL64UC 7.53
affected
KRNL64NUC 7.22
affected
KRNL64NUC 7.22EXT
affected
Description
The ACL (Access Control List) of SAP Message Server - versions KERNEL 7.22, KERNEL 7.53, KERNEL 7.54, KERNEL 7.77, RNL64UC 7.22, RNL64UC 7.22EXT, RNL64UC 7.53, KRNL64NUC 7.22, KRNL64NUC 7.22EXT, can be bypassed in certain conditions, which may enable an authenticated malicious user to enter the network of the SAP systems served by the attacked SAP Message server. This may lead to unauthorized read and write of data as well as rendering the system unavailable.
Problem types
CWE-863: Incorrect Authorization
Product status
KERNEL 7.22
KERNEL 7.53
KERNEL 7.54
KERNEL 7.77
RNL64UC 7.22
RNL64UC 7.22EXT
RNL64UC 7.53
KRNL64NUC 7.22
KRNL64NUC 7.22EXT
References
www.sap.com/.../02/fa865ea4-167e-0010-bca6-c68f7e60039b.html
www.sap.com/.../02/fa865ea4-167e-0010-bca6-c68f7e60039b.html