CVE-2019-0270
First published: Tue Mar 12 2019(Updated: )
ABAP Server of SAP NetWeaver and ABAP Platform fail to perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. This has been corrected in the following versions: KRNL32NUC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL32UC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL64NUC 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49, 7.74, KRNL64UC 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49, 7.73, 7.74, 8.04, KERNEL 7.21, 7.45, 7.49, 7.53, 7.73, 7.74, 7.75, 8.04.
Credit: cna@sap.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Sap Advanced Business Application Programming Platform Kernel | =7.15 | |
| Sap Advanced Business Application Programming Platform Kernel | =7.21 | |
| Sap Advanced Business Application Programming Platform Kernel | =7.22 | |
| Sap Advanced Business Application Programming Platform Kernel | =7.49 | |
| Sap Advanced Business Application Programming Platform Kernel | =7.53 | |
| Sap Advanced Business Application Programming Platform Kernel | =7.73 | |
| Sap Advanced Business Application Programming Platform Kernel | =7.74 | |
| Sap Advanced Business Application Programming Platform Kernel | =7.75 | |
| Sap Advanced Business Application Programming Platform Kernel | =8.04 | |
| Sap Advanced Business Application Programming Platform Krnl32nuc | =7.21 | |
| Sap Advanced Business Application Programming Platform Krnl32nuc | =7.21ext | |
| Sap Advanced Business Application Programming Platform Krnl32nuc | =7.22 | |
| Sap Advanced Business Application Programming Platform Krnl32nuc | =7.22ext | |
| Sap Advanced Business Application Programming Platform Krnl32uc | =7.21 | |
| Sap Advanced Business Application Programming Platform Krnl32uc | =7.21ext | |
| Sap Advanced Business Application Programming Platform Krnl32uc | =7.22 | |
| Sap Advanced Business Application Programming Platform Krnl32uc | =7.22ext | |
| Sap Advanced Business Application Programming Platform Krnl64nuc | =7.21 | |
| Sap Advanced Business Application Programming Platform Krnl64nuc | =7.21ext | |
| Sap Advanced Business Application Programming Platform Krnl64nuc | =7.22 | |
| Sap Advanced Business Application Programming Platform Krnl64nuc | =7.22ext | |
| Sap Advanced Business Application Programming Platform Krnl64uc | =7.21 | |
| Sap Advanced Business Application Programming Platform Krnl64uc | =7.21ext | |
| Sap Advanced Business Application Programming Platform Krnl64uc | =7.22 | |
| Sap Advanced Business Application Programming Platform Krnl64uc | =7.22ext | |
| Sap Advanced Business Application Programming Platform Krnl64uc | =7.49 | |
| Sap Advanced Business Application Programming Platform Krnl64uc | =7.73 | |
| Sap Advanced Business Application Programming Platform Krnl64uc | =7.74 | |
| Sap Advanced Business Application Programming Platform Krnl64uc | =8.04 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2019-0270?
The severity of CVE-2019-0270 is high with a severity value of 8.8.
What is the affected software for CVE-2019-0270?
The affected software for CVE-2019-0270 is SAP Advanced Business Application Programming Platform Kernel versions 7.15, 7.21, and 7.22.
How do I fix CVE-2019-0270?
CVE-2019-0270 has been corrected in the following versions: KRNL32NUC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL32UC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL64NUC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL64UC 7.21, 7.21EXT, 7.22, 7.22EXT.
Where can I find more information about CVE-2019-0270?
You can find more information about CVE-2019-0270 at the following references: SecurityFocus BID 107377, SAP Note 2727689, and SAP Community Network wiki page.
What is the CWE ID for CVE-2019-0270?
The CWE ID for CVE-2019-0270 is CWE-862.
- collector/nvd-index
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/references
- agent/author
- agent/severity
- agent/weakness
- agent/tags
- agent/first-publish-date
- agent/description
- agent/event
- agent/source
- vendor/sap
- canonical/sap advanced business application programming platform kernel
- version/sap advanced business application programming platform kernel/7.15
- version/sap advanced business application programming platform kernel/7.21
- version/sap advanced business application programming platform kernel/7.22
- version/sap advanced business application programming platform kernel/7.49
- version/sap advanced business application programming platform kernel/7.53
- version/sap advanced business application programming platform kernel/7.73
- version/sap advanced business application programming platform kernel/7.74
- version/sap advanced business application programming platform kernel/7.75
- version/sap advanced business application programming platform kernel/8.04
- canonical/sap advanced business application programming platform krnl32nuc
- version/sap advanced business application programming platform krnl32nuc/7.21
- version/sap advanced business application programming platform krnl32nuc/7.21ext
- version/sap advanced business application programming platform krnl32nuc/7.22
- version/sap advanced business application programming platform krnl32nuc/7.22ext
- canonical/sap advanced business application programming platform krnl32uc
- version/sap advanced business application programming platform krnl32uc/7.21
- version/sap advanced business application programming platform krnl32uc/7.21ext
- version/sap advanced business application programming platform krnl32uc/7.22
- version/sap advanced business application programming platform krnl32uc/7.22ext
- canonical/sap advanced business application programming platform krnl64nuc
- version/sap advanced business application programming platform krnl64nuc/7.21
- version/sap advanced business application programming platform krnl64nuc/7.21ext
- version/sap advanced business application programming platform krnl64nuc/7.22
- version/sap advanced business application programming platform krnl64nuc/7.22ext
- canonical/sap advanced business application programming platform krnl64uc
- version/sap advanced business application programming platform krnl64uc/7.21
- version/sap advanced business application programming platform krnl64uc/7.21ext
- version/sap advanced business application programming platform krnl64uc/7.22
- version/sap advanced business application programming platform krnl64uc/7.22ext
- version/sap advanced business application programming platform krnl64uc/7.49
- version/sap advanced business application programming platform krnl64uc/7.73
- version/sap advanced business application programming platform krnl64uc/7.74
- version/sap advanced business application programming platform krnl64uc/8.04