CVE-2021-21466

{"id": "CVE-2021-21466", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "[email protected]", "cvssData": {"version": "2.0", "baseScore": 6.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P", "authentication": "SINGLE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV30": [{"type": "Secondary", "source": "[email protected]", "cvssData": {"scope": "CHANGED", "version": "3.0", "baseScore": 9.9, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 6.0, "exploitabilityScore": 3.1}], "cvssMetricV31": [{"type": "Primary", "source": "[email protected]", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.8, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 2.8}]}, "published": "2021-01-12T15:15:15.953", "references": [{"url": "http://packetstormsecurity.com/files/167229/SAP-Application-Server-ABAP-ABAP-Platform-Code-Injection-SQL-Injection-Missing-Authorization.html", "tags": ["Exploit", "Third Party Advisory", "VDB Entry"], "source": "[email protected]"}, {"url": "http://seclists.org/fulldisclosure/2022/May/42", "tags": ["Exploit", "Mailing List", "Third Party Advisory"], "source": "[email protected]"}, {"url": "https://launchpad.support.sap.com/#/notes/2999854", "tags": ["Permissions Required", "Vendor Advisory"], "source": "[email protected]"}, {"url": "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=564760476", "tags": ["Vendor Advisory"], "source": "[email protected]"}, {"url": "http://packetstormsecurity.com/files/167229/SAP-Application-Server-ABAP-ABAP-Platform-Code-Injection-SQL-Injection-Missing-Authorization.html", "tags": ["Exploit", "Third Party Advisory", "VDB Entry"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://seclists.org/fulldisclosure/2022/May/42", "tags": ["Exploit", "Mailing List", "Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://launchpad.support.sap.com/#/notes/2999854", "tags": ["Permissions Required", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=564760476", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "[email protected]", "description": [{"lang": "en", "value": "CWE-94"}]}], "descriptions": [{"lang": "en", "value": "SAP Business Warehouse, versions 700, 701, 702, 711, 730, 731, 740, 750, 782 and SAP BW/4HANA, versions 100, 200, allow a low privileged attacker to inject code using a remote enabled function module over the network. Via the function module an attacker can create a malicious ABAP report which could be used to get access to sensitive data, to inject malicious UPDATE statements that could have also impact on the operating system, to disrupt the functionality of the SAP system which can thereby lead to a Denial of Service."}, {"lang": "es", "value": "SAP Business Warehouse, versiones 700, 701, 702, 711, 730, 731, 740, 750, 782 y SAP BW/4HANA, versiones 100, 200, permiten a un atacante poco privilegiado inyectar c\u00f3digo usando un m\u00f3dulo de funci\u00f3n habilitado de forma remota a trav\u00e9s de la red. Por medio del m\u00f3dulo de funci\u00f3n, un atacante puede crear un reporte ABAP malicioso que podr\u00eda ser usado para obtener acceso a datos confidenciales, para inyectar sentencias UPDATE maliciosas que tambi\u00e9n podr\u00edan tener un impacto en el sistema operativo, para interrumpir la funcionalidad del sistema SAP que, por lo tanto, puede conducir a una denegaci\u00f3n de servicio"}], "lastModified": "2024-11-21T05:48:25.767", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:sap:business_warehouse:700:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D495F997-45A9-4C80-841E-781E1EAC3074"}, {"criteria": "cpe:2.3:a:sap:business_warehouse:701:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2FCA6F5A-25B8-46E1-B407-38F61222C057"}, {"criteria": "cpe:2.3:a:sap:business_warehouse:702:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3FE999EE-9B6B-4D2C-9347-5558B878AE7B"}, {"criteria": "cpe:2.3:a:sap:business_warehouse:711:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "11DE777B-AA53-4A6B-AD6E-5DCEEAC217AA"}, {"criteria": "cpe:2.3:a:sap:business_warehouse:730:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EF8F2CE3-BA4B-4A9C-A284-87F0AB797B92"}, {"criteria": "cpe:2.3:a:sap:business_warehouse:731:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "00732AD2-BEED-4C1F-AC39-46E6F33CBB5E"}, {"criteria": "cpe:2.3:a:sap:business_warehouse:740:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EC7DABAD-36FA-49D7-8C3C-3AA49604BE37"}, {"criteria": "cpe:2.3:a:sap:business_warehouse:750:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "526C11C6-B67D-49F1-94E6-A324AA581EDD"}, {"criteria": "cpe:2.3:a:sap:business_warehouse:782:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "929A4FB3-BEEF-4A69-B77C-FD1A0B3C7DFF"}, {"criteria": "cpe:2.3:a:sap:bw\\/4hana:100:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BCD13072-E149-45FB-BD46-E3D48D81216B"}, {"criteria": "cpe:2.3:a:sap:bw\\/4hana:200:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "704134B4-A642-488F-94B3-48A744C46A1A"}], "operator": "OR"}]}], "sourceIdentifier": "[email protected]"}