Skip to content
CVE PROGRAM SOURCE RECORD6.3 Medium

CVE-2024-33005

Missing Authorization check in SAP NetWeaver Application Server (ABAP and Java),SAP Web Dispatcher and SAP Content Server

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
sap

Description

Due to the missing authorization checks in the local systems, the admin users of SAP Web Dispatcher, SAP NetWeaver Application Server (ABAP and Java), and SAP Content Server can impersonate other users and may perform some unintended actions. This could lead to a low impact on confidentiality and a high impact on the integrity and availability of the applications.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SAP_SE SAP NetWeaver Application Server (ABAP and Java),SAP Web Dispatcher and SAP Content Server

Default version status: unaffected

  • KRNL64NUC 7.22affected
  • KRNL64NUC 7.22EXTaffected
  • KRNL64UC 7.22affected
  • KRNL64UC 7.22EXTaffected
  • KRNL64UC 7.53affected
  • WEBDISP 7.53affected
  • WEBDISP 7.77affected
  • WEBDISP 7.85affected
  • WEBDISP 7.22_EXTaffected
  • WEBDISP 7.89affected
  • WEBDISP 7.54affected
  • WEBDISP 7.93affected
  • KERNEL 7.22affected
  • KERNEL 7.53affected
  • KERNEL 7.77affected
  • KERNEL 7.85affected
  • KERNEL 7.89affected
  • KERNEL 7.54affected
  • KERNEL 7.93affected

References