CVE-2021-21468

Description

The BW Database Interface does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges that allows the user to practically read out any database table.

Risk Information

Base Score
6.5
MODERATE
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS Score
Exploitation Probability
0.417

Associated Vulnerability

VulnerabilityOS Platform
Multiple Vulnerabilities are affected in SAP Business Warehouse (Process Chains) 731Windows
Multiple Vulnerabilities are affected in SAP Business Warehouse (Process Chains) 740Windows
Multiple Vulnerabilities are affected in SAP Business Warehouse (Process Chains) 750Windows
Vulnerabilities CVE-2020-26838,CVE-2021-21465,CVE-2021-21468 are affected in SAP Business Warehouse (Process Chains) 751Windows
Vulnerabilities CVE-2020-26838,CVE-2021-21465,CVE-2021-21468 are affected in SAP Business Warehouse (Process Chains) 752Windows
Vulnerabilities CVE-2020-26838,CVE-2021-21465,CVE-2021-21468 are affected in SAP Business Warehouse (Process Chains) 753Windows
Vulnerabilities CVE-2020-26838,CVE-2021-21465,CVE-2021-21468 are affected in SAP Business Warehouse (Process Chains) 754Windows
Vulnerabilities CVE-2020-26838,CVE-2021-21465,CVE-2021-21468 are affected in SAP Business Warehouse (Process Chains) 755Windows
Vulnerabilities CVE-2020-26838,CVE-2021-21465,CVE-2021-21466,CVE-2021-21468 are affected in SAP Business Warehouse (Process Chains) 782Windows
Vulnerabilities CVE-2021-21465,CVE-2021-21468 are affected in SAP Business Warehouse (Process Chains) 710Windows
Vulnerabilities CVE-2021-21465,CVE-2021-21466,CVE-2021-21468 are affected in SAP Business Warehouse (Process Chains) 711Windows
Vulnerabilities CVE-2021-21465,CVE-2021-21466,CVE-2021-21468,CVE-2023-33992 are affected in SAP Business Warehouse (Process Chains) 730Windows
Multiple Vulnerabilities are affected in SAP Business Warehouse (Process Chains) 730Windows
Vulnerabilities CVE-2020-26838,CVE-2021-21465,CVE-2021-21468,CVE-2024-39595 are affected in SAP Business Warehouse (Process Chains) 751Windows
Vulnerabilities CVE-2020-26838,CVE-2021-21465,CVE-2021-21468,CVE-2024-39595 are affected in SAP Business Warehouse (Process Chains) 752Windows
Vulnerabilities CVE-2020-26838,CVE-2021-21465,CVE-2021-21468,CVE-2024-39595 are affected in SAP Business Warehouse (Process Chains) 753Windows
Vulnerabilities CVE-2020-26838,CVE-2021-21465,CVE-2021-21468,CVE-2024-39595 are affected in SAP Business Warehouse (Process Chains) 754Windows
Vulnerabilities CVE-2020-26838,CVE-2021-21465,CVE-2021-21468,CVE-2024-39595 are affected in SAP Business Warehouse (Process Chains) 755Windows
Multiple Vulnerabilities are affected in SAP Business Warehouse (Process Chains) 751Windows
Multiple Vulnerabilities are affected in SAP Business Warehouse (Process Chains) 752Windows
Multiple Vulnerabilities are affected in SAP Business Warehouse (Process Chains) 753Windows
Multiple Vulnerabilities are affected in SAP Business Warehouse (Process Chains) 754Windows
Multiple Vulnerabilities are affected in SAP Business Warehouse (Process Chains) 755Windows

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234