PT-2019-4259
CVE-2019-0349
·
تاريخ النشر
2019-08-13
·
تاريخ التحديث
2020-08-24
الوصف من
CVSS 3.1
7.2
عاليةالمقاييسAV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
SAP Kernel (ABAP Debugger) versions 7.21 through 7.77
Description
The issue is caused by weaknesses in the authorization procedure of the ABAP Debugger. This allows a remote attacker to execute the "Go to statement" command without proper authorization.
Recommendations
For SAP Kernel (ABAP Debugger) versions 7.21 through 7.77, ensure that users possess the required authorization S DEVELOP DEBUG 02 to execute the "Go to statement" command. As a temporary workaround, consider restricting access to the ABAP Debugger until a patch is available.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾