CVE-2021-21481

Name of the Vulnerable Software and Affected Versions SAP NetWeaver versions 7.10 through 7.50

Description The MigrationService, which is part of SAP NetWeaver, does not perform an authorization check. This might allow an unauthorized attacker to access configuration objects, including those that grant administrative privileges. This could result in complete compromise of system confidentiality, integrity, and availability.

Recommendations For SAP NetWeaver versions 7.10 through 7.50, consider disabling the MigrationService until a patch is available to prevent unauthorized access to configuration objects. Restrict access to configuration objects that grant administrative privileges to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.