CVE-2021-40504

Description

A certain template role in SAP NetWeaver Application Server for ABAP and ABAP Platform - versions 700, 701, 702, 710, 711, 730, 731, 740, 750, 751, 752, 753, 754, 755, 756, contains transport authorizations, which exceed expected display only permissions.

Risk Information

Base Score

4.9

MODERATE

Vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N

EPSS Score

Exploitation Probability

0.106

Associated Vulnerability

Vulnerability	OS Platform
Multiple Vulnerabilities are affected in SAP NetWeaver Application Server ABAP 731	Windows
Multiple Vulnerabilities are affected in SAP NetWeaver Application Server ABAP 740	Windows
Multiple Vulnerabilities are affected in SAP NetWeaver Application Server ABAP	Windows
Multiple Vulnerabilities are affected in SAP NetWeaver Application Server ABAP 751	Windows
Multiple Vulnerabilities are affected in SAP NetWeaver Application Server ABAP 752	Windows
Multiple Vulnerabilities are affected in SAP NetWeaver Application Server ABAP 753	Windows
Multiple Vulnerabilities are affected in SAP NetWeaver Application Server ABAP 754	Windows
Multiple Vulnerabilities are affected in SAP NetWeaver Application Server ABAP 755	Windows
Multiple Vulnerabilities are affected in SAP NetWeaver Application Server ABAP 700	Windows
Multiple Vulnerabilities are affected in SAP NetWeaver Application Server ABAP 710	Windows
Multiple Vulnerabilities are affected in SAP NetWeaver Application Server ABAP 730	Windows
Multiple Vulnerabilities are affected in SAP NetWeaver Application Server ABAP 711	Windows
Multiple Vulnerabilities are affected in SAP NetWeaver Application Server ABAP	Windows
Multiple Vulnerabilities are affected in SAP NetWeaver Application Server ABAP 702	Windows
Multiple Vulnerabilities are affected in SAP NetWeaver Application Server ABAP 756	Windows
Multiple Vulnerabilities are affected in SAP NetWeaver and ABAP platform (ST-PI) 710	Windows
Multiple Vulnerabilities are affected in SAP NetWeaver and ABAP platform (ST-PI) 711	Windows
Multiple Vulnerabilities are affected in SAP NetWeaver and ABAP platform (ST-PI) 730	Windows

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234