CVE-2022-26102

 

Published at: - 10-03-2022 06:47

Last modified: - 17-01-2023 09:26

Total changes: - 4

Description

Due to missing authorization check, SAP NetWeaver Application Server for ABAP - versions 700, 701, 702, 731, allows an authenticated attacker, to access content on the start screen of any transaction that is available with in the same SAP system even if he/she isn't authorized for that transaction. A successful exploitation could expose information and in worst case manipulate data before the start screen is executed, resulting in limited impact on confidentiality and integrity of the application.

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

 

Verification logic

 

Reference

• https://dam.sap.com/mac/embed/public/pdf/a/ucQrx6G.htm?rc=10
• https://launchpad.support.sap.com/#/notes/3145997

 

Keywords

NVD

 

CVE-2022-26102

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures