CVE-2021-40501: High severity sap abap platform vulnerability
SAP ABAP Platform Kernel - versions 7.77, 7.81, 7.85, 7.86, does not perform necessary authorization checks for an authenticated business user, resulting in escalation of privileges. That means this business user is able to read and modify data beyond the vulnerable system. However, the attacker can neither significantly reduce the performance of the system nor stop the system.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2021-40501?
CVE-2021-40501 is a vulnerability in SAP ABAP Platform Kernel versions 7.77, 7.81, 7.85, and 7.86 that allows an authenticated business user to escalate privileges and read/modify data beyond the vulnerable system.
What is the severity of CVE-2021-40501?
CVE-2021-40501 has a severity score of 8.1 (High).
How does CVE-2021-40501 impact SAP ABAP Platform Kernel?
CVE-2021-40501 allows an authenticated business user to bypass necessary authorization checks, resulting in an escalation of privileges and access to sensitive data.
Which versions of SAP ABAP Platform Kernel are affected by CVE-2021-40501?
CVE-2021-40501 affects SAP ABAP Platform Kernel versions 7.77, 7.81, 7.85, and 7.86.
How can I mitigate the vulnerability CVE-2021-40501?
To mitigate CVE-2021-40501, it is recommended to apply the necessary patches or updates provided by SAP.