{"id":"CVE-2019-0257","state":"PUBLISHED","title":"Customizing functionality of SAP NetWeaver AS ABAP Platform (fixed in versions from 7.0 to 7.02, from 7.10 to 7.11, 7.30, 7.31, 7.40, from 7.50 to 7.53, from 7.74 to 7.75) does not","description":"Customizing functionality of SAP NetWeaver AS ABAP Platform (fixed in versions from 7.0 to 7.02, from 7.10 to 7.11, 7.30, 7.31, 7.40, from 7.50 to 7.53, from 7.74 to 7.75) does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges.","publishedAt":"2019-02-15T18:00:00.000Z","updatedAt":"2024-08-04T17:44:16.190Z","severity":null,"assigner":"sap","products":["SAP SE ABAP Platform(SAP Basis)"],"affected":[{"vendor":"SAP SE","product":"ABAP Platform(SAP Basis)","versions":[{"version":"< from 7.0 to 7.02","status":"affected"},{"version":"< from 7.10 to 7.11","status":"affected"},{"version":"< 7.30","status":"affected"},{"version":"< 7.31","status":"affected"},{"version":"< 7.40","status":"affected"},{"version":"< from 7.50 to 7.53","status":"affected"},{"version":"< from 7.74 to 7.75","status":"affected"}]}],"references":["https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=510922943","https://launchpad.support.sap.com/#/notes/2728839","http://www.securityfocus.com/bid/106999"],"weaknesses":[],"ingestedAt":"2026-10-29T19:45:08.139Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2019/0xxx/CVE-2019-0257.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2019-0257","state":"PUBLISHED","datePublished":"2019-02-15T18:00:00.000Z","dateUpdated":"2024-08-04T17:44:16.190Z","assignerShortName":"sap","assignerOrgId":"e4686d1a-f260-4930-ac4c-2f5c992778dd","dateReserved":"2018-11-26T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"Customizing functionality of SAP NetWeaver AS ABAP Platform (fixed in versions from 7.0 to 7.02, from 7.10 to 7.11, 7.30, 7.31, 7.40, from 7.50 to 7.53, from 7.74 to 7.75) does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges."}],"affected":[{"vendor":"SAP SE","product":"ABAP Platform(SAP Basis)","versions":[{"version":"< from 7.0 to 7.02","status":"affected"},{"version":"< from 7.10 to 7.11","status":"affected"},{"version":"< 7.30","status":"affected"},{"version":"< 7.31","status":"affected"},{"version":"< 7.40","status":"affected"},{"version":"< from 7.50 to 7.53","status":"affected"},{"version":"< from 7.74 to 7.75","status":"affected"}]}],"references":[{"url":"https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=510922943","tags":["x_refsource_MISC"]},{"url":"https://launchpad.support.sap.com/#/notes/2728839","tags":["x_refsource_MISC"]},{"url":"http://www.securityfocus.com/bid/106999","name":"106999","tags":["vdb-entry","x_refsource_BID"]}],"problemTypes":[{"descriptions":[{"description":"Missing Authorization Check","lang":"en","type":"text"}]}],"providerMetadata":{"shortName":"sap","dateUpdated":"2019-02-16T10:57:01.000Z","orgId":"e4686d1a-f260-4930-ac4c-2f5c992778dd"},"datePublic":"2019-02-12T00:00:00.000Z","x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cna@sap.com","ID":"CVE-2019-0257","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"ABAP Platform(SAP Basis)","version":{"version_data":[{"version_name":"<","version_value":"from 7.0 to 7.02"},{"version_name":"<","version_value":"from 7.10 to 7.11"},{"version_name":"<","version_value":"7.30"},{"version_name":"<","version_value":"7.31"},{"version_name":"<","version_value":"7.40"},{"version_name":"<","version_value":"from 7.50 to 7.53"},{"version_name":"<","version_value":"from 7.74 to 7.75"}]}}]},"vendor_name":"SAP SE"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Customizing functionality of SAP NetWeaver AS ABAP Platform (fixed in versions from 7.0 to 7.02, from 7.10 to 7.11, 7.30, 7.31, 7.40, from 7.50 to 7.53, from 7.74 to 7.75) does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"Missing Authorization Check"}]}]},"references":{"reference_data":[{"name":"https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=510922943","refsource":"MISC","url":"https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=510922943"},{"name":"https://launchpad.support.sap.com/#/notes/2728839","refsource":"MISC","url":"https://launchpad.support.sap.com/#/notes/2728839"},{"name":"106999","refsource":"BID","url":"http://www.securityfocus.com/bid/106999"}]}}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=510922943","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://launchpad.support.sap.com/#/notes/2728839","tags":["x_refsource_MISC","x_transferred"]},{"url":"http://www.securityfocus.com/bid/106999","name":"106999","tags":["vdb-entry","x_refsource_BID","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-04T17:44:16.190Z"}}]}}}