CVE-2021-42067: SSRF
In SAP NetWeaver AS for ABAP and ABAP Platform - versions 701, 702, 711, 730, 731, 740, 750, 751, 752, 753, 754, 755, 756, 786, an attacker authenticated as a regular user can use the S/4 Hana dashboard to reveal systems and services which they would not normally be allowed to see. No information alteration or denial of service is possible.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2021-42067?
CVE-2021-42067 is a vulnerability in SAP NetWeaver AS for ABAP and ABAP Platform that allows an attacker authenticated as a regular user to reveal systems and services they would not normally be allowed to see.
What versions of SAP NetWeaver AS for ABAP and ABAP Platform are affected by CVE-2021-42067?
Versions 701, 702, 711, 730, 731, 740, 750, 751, 752, 753, 754, 755, 756, and 786 of SAP NetWeaver AS for ABAP and ABAP Platform are affected by CVE-2021-42067.
What is the severity of CVE-2021-42067?
CVE-2021-42067 has a severity rating of 4.3 (medium).
How can an attacker exploit CVE-2021-42067?
An attacker authenticated as a regular user can exploit CVE-2021-42067 by using the S/4 Hana dashboard to reveal unauthorized systems and services.
Where can I find more information about CVE-2021-42067?
You can find more information about CVE-2021-42067 on the SAP Support Launchpad and the SAP Community Network wiki.