| Package | Affected versions | Patched versions |
|---|---|---|
| netweaver application server abap | = 700= 701= 702= 730= 731= 740= 750= 751= 752= 753= 754= 755= 756= 757= 758= 816 |
Due to a missing authorization check in SAP NetWeaver Application Server for ABAP, an authenticated attacker with user privileges could read Database Analyzer Log Files via a specific RFC function module. The attacker with the necessary privileges to execute this function module could potentially escalate their privileges and read the sensitive data, resulting in a limited impact on the confidentiality of the information stored. However, the integrity and availability of the system are not affected.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free