CVE-2021-40502: High severity sap commerce cloud vulnerability
SAP Commerce - versions 2105.3, 2011.13, 2005.18, 1905.34, does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. Authenticated attackers will be able to access and edit data from b2b units they do not belong to.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-40502?
CVE-2021-40502 has been classified with a medium severity level due to its potential for privilege escalation.
How do I fix CVE-2021-40502?
To mitigate CVE-2021-40502, ensure that you upgrade SAP Commerce to a patched version that includes necessary authorization checks.
What versions of SAP Commerce are affected by CVE-2021-40502?
CVE-2021-40502 affects SAP Commerce versions 1905.34, 2005.18, 2011.13, and 2105.3.
Who can exploit CVE-2021-40502?
Authenticated attackers can exploit CVE-2021-40502 to access and edit data from unauthorized b2b units.
What are the implications of CVE-2021-40502?
The implications of CVE-2021-40502 include unauthorized data access and modification, leading to potential data integrity issues.