{"id":"CVE-2019-0349","state":"PUBLISHED","title":"SAP Kernel (ABAP Debugger), versions KRNL32NUC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL32UC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL64NUC 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49, KRNL64UC 7.21, 7.2","description":"SAP Kernel (ABAP Debugger), versions KRNL32NUC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL32UC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL64NUC 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49, KRNL64UC 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49, 7.73, KERNEL 7.21, 7.49, 7.53, 7.73, 7.75, 7.76, 7.77, allows a user to execute “Go to statement” without possessing the authorization S_DEVELOP DEBUG 02, resulting in Missing Authorization Check","publishedAt":"2019-08-14T14:54:52.000Z","updatedAt":"2024-08-04T17:44:16.482Z","severity":null,"assigner":"sap","products":["SAP SE SAP Kernel (KRNL32NUC)","SAP SE SAP Kernel (KRNL32UC)","SAP SE SAP Kernel (KRNL64NUC)","SAP SE SAP Kernel (KRNL64UC)","SAP SE SAP Kernel (KERNEL)"],"affected":[{"vendor":"SAP SE","product":"SAP Kernel (KRNL32NUC)","versions":[{"version":"< 7.21","status":"affected"},{"version":"< 7.21EXT","status":"affected"},{"version":"< 7.22","status":"affected"},{"version":"< 7.22EXT","status":"affected"}]},{"vendor":"SAP SE","product":"SAP Kernel (KRNL32UC)","versions":[{"version":"< 7.21","status":"affected"},{"version":"< 7.21EXT","status":"affected"},{"version":"< 7.22","status":"affected"},{"version":"< 7.22EXT","status":"affected"}]},{"vendor":"SAP SE","product":"SAP Kernel (KRNL64NUC)","versions":[{"version":"< 7.21","status":"affected"},{"version":"< 7.21EXT","status":"affected"},{"version":"< 7.22","status":"affected"},{"version":"< 7.22EXT","status":"affected"},{"version":"< 7.49","status":"affected"}]},{"vendor":"SAP SE","product":"SAP Kernel (KRNL64UC)","versions":[{"version":"< 7.21","status":"affected"},{"version":"< 7.21EXT","status":"affected"},{"version":"< 7.22","status":"affected"},{"version":"< 7.22EXT","status":"affected"},{"version":"< 7.49","status":"affected"},{"version":"< 7.73","status":"affected"}]},{"vendor":"SAP SE","product":"SAP Kernel (KERNEL)","versions":[{"version":"< 7.21","status":"affected"},{"version":"< 7.49","status":"affected"},{"version":"< 7.53","status":"affected"},{"version":"< 7.73","status":"affected"},{"version":"< 7.75","status":"affected"},{"version":"< 7.76","status":"affected"},{"version":"< 7.77","status":"affected"}]}],"references":["https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=523998017","https://launchpad.support.sap.com/#/notes/2798743"],"weaknesses":[],"ingestedAt":"2026-10-29T19:45:08.139Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2019/0xxx/CVE-2019-0349.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2019-0349","state":"PUBLISHED","datePublished":"2019-08-14T14:54:52.000Z","dateUpdated":"2024-08-04T17:44:16.482Z","assignerShortName":"sap","assignerOrgId":"e4686d1a-f260-4930-ac4c-2f5c992778dd","dateReserved":"2018-11-26T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"SAP Kernel (ABAP Debugger), versions KRNL32NUC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL32UC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL64NUC 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49, KRNL64UC 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49, 7.73, KERNEL 7.21, 7.49, 7.53, 7.73, 7.75, 7.76, 7.77, allows a user to execute “Go to statement” without possessing the authorization S_DEVELOP DEBUG 02, resulting in Missing Authorization Check"}],"affected":[{"vendor":"SAP SE","product":"SAP Kernel (KRNL32NUC)","versions":[{"version":"< 7.21","status":"affected"},{"version":"< 7.21EXT","status":"affected"},{"version":"< 7.22","status":"affected"},{"version":"< 7.22EXT","status":"affected"}]},{"vendor":"SAP SE","product":"SAP Kernel (KRNL32UC)","versions":[{"version":"< 7.21","status":"affected"},{"version":"< 7.21EXT","status":"affected"},{"version":"< 7.22","status":"affected"},{"version":"< 7.22EXT","status":"affected"}]},{"vendor":"SAP SE","product":"SAP Kernel (KRNL64NUC)","versions":[{"version":"< 7.21","status":"affected"},{"version":"< 7.21EXT","status":"affected"},{"version":"< 7.22","status":"affected"},{"version":"< 7.22EXT","status":"affected"},{"version":"< 7.49","status":"affected"}]},{"vendor":"SAP SE","product":"SAP Kernel (KRNL64UC)","versions":[{"version":"< 7.21","status":"affected"},{"version":"< 7.21EXT","status":"affected"},{"version":"< 7.22","status":"affected"},{"version":"< 7.22EXT","status":"affected"},{"version":"< 7.49","status":"affected"},{"version":"< 7.73","status":"affected"}]},{"vendor":"SAP SE","product":"SAP Kernel (KERNEL)","versions":[{"version":"< 7.21","status":"affected"},{"version":"< 7.49","status":"affected"},{"version":"< 7.53","status":"affected"},{"version":"< 7.73","status":"affected"},{"version":"< 7.75","status":"affected"},{"version":"< 7.76","status":"affected"},{"version":"< 7.77","status":"affected"}]}],"references":[{"url":"https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=523998017","tags":["x_refsource_MISC"]},{"url":"https://launchpad.support.sap.com/#/notes/2798743","tags":["x_refsource_MISC"]}],"problemTypes":[{"descriptions":[{"description":"Missing Authorization Check","lang":"en","type":"text"}]}],"providerMetadata":{"shortName":"sap","dateUpdated":"2019-08-14T14:54:52.000Z","orgId":"e4686d1a-f260-4930-ac4c-2f5c992778dd"},"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cna@sap.com","ID":"CVE-2019-0349","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"SAP Kernel (KRNL32NUC)","version":{"version_data":[{"version_name":"<","version_value":"7.21"},{"version_name":"<","version_value":"7.21EXT"},{"version_name":"<","version_value":"7.22"},{"version_name":"<","version_value":"7.22EXT"}]}},{"product_name":"SAP Kernel (KRNL32UC)","version":{"version_data":[{"version_name":"<","version_value":"7.21"},{"version_name":"<","version_value":"7.21EXT"},{"version_name":"<","version_value":"7.22"},{"version_name":"<","version_value":"7.22EXT"}]}},{"product_name":"SAP Kernel (KRNL64NUC)","version":{"version_data":[{"version_name":"<","version_value":"7.21"},{"version_name":"<","version_value":"7.21EXT"},{"version_name":"<","version_value":"7.22"},{"version_name":"<","version_value":"7.22EXT"},{"version_name":"<","version_value":"7.49"}]}},{"product_name":"SAP Kernel (KRNL64UC)","version":{"version_data":[{"version_name":"<","version_value":"7.21"},{"version_name":"<","version_value":"7.21EXT"},{"version_name":"<","version_value":"7.22"},{"version_name":"<","version_value":"7.22EXT"},{"version_name":"<","version_value":"7.49"},{"version_name":"<","version_value":"7.73"}]}},{"product_name":"SAP Kernel (KERNEL)","version":{"version_data":[{"version_name":"<","version_value":"7.21"},{"version_name":"<","version_value":"7.49"},{"version_name":"<","version_value":"7.53"},{"version_name":"<","version_value":"7.73"},{"version_name":"<","version_value":"7.75"},{"version_name":"<","version_value":"7.76"},{"version_name":"<","version_value":"7.77"}]}}]},"vendor_name":"SAP SE"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"SAP Kernel (ABAP Debugger), versions KRNL32NUC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL32UC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL64NUC 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49, KRNL64UC 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49, 7.73, KERNEL 7.21, 7.49, 7.53, 7.73, 7.75, 7.76, 7.77, allows a user to execute “Go to statement” without possessing the authorization S_DEVELOP DEBUG 02, resulting in Missing Authorization Check"}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"Missing Authorization Check"}]}]},"references":{"reference_data":[{"name":"https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=523998017","refsource":"MISC","url":"https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=523998017"},{"name":"https://launchpad.support.sap.com/#/notes/2798743","refsource":"MISC","url":"https://launchpad.support.sap.com/#/notes/2798743"}]}}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=523998017","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://launchpad.support.sap.com/#/notes/2798743","tags":["x_refsource_MISC","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-04T17:44:16.482Z"}}]}}}