CVE-2021-42067

CWE-668 — Exposure to Wrong Sphere3 documents3 sources
Severity
4.3MEDIUM
EPSS
0.3%
top 50.66%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
SAP SE SAP Netweaver AS FOR Abap AND Abap PlatformSAP Netweaver AbapSAP Netweaver Application Server Abap
Timeline
PublishedJan 14
Latest updateJan 15

Description

In SAP NetWeaver AS for ABAP and ABAP Platform - versions 701, 702, 711, 730, 731, 740, 750, 751, 752, 753, 754, 755, 756, 786, an attacker authenticated as a regular user can use the S/4 Hana dashboard to reveal systems and services which they would not normally be allowed to see. No information alteration or denial of service is possible.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:NExploitability: 2.8 | Impact: 1.4

Affected Packages3 packages

▶NVDsap/netweaver_abap14 versions+13
▶NVDsap/netweaver_application14 versions+13

🔴Vulnerability Details

2
GHSA
GHSA-mqm8-93xw-f4w3: In SAP NetWeaver AS for ABAP and ABAP Platform - versions 701, 702, 711, 730, 731, 740, 750, 751, 752, 753, 754, 755, 756, 786, an attacker authentica↗2022-01-15
▶
CVEList
CVE-2021-42067: In SAP NetWeaver AS for ABAP and ABAP Platform - versions 701, 702, 711, 730, 731, 740, 750, 751, 752, 753, 754, 755, 756, 786, an attacker authentica↗2022-01-14
▶
CVE-2021-42067 (MEDIUM CVSS 4.3) | In SAP NetWeaver AS for ABAP and AB | cvebase.io