CVE-2022-29611: High severity sap netweaver as abap vulnerability
Published May 11, 2022
·Updated
SAP NetWeaver Application Server for ABAP and ABAP Platform do not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges.
Affected Software
17 affected components
SAP NetWeaver Application Server ABAP=700
SAP NetWeaver Application Server ABAP=701
SAP NetWeaver Application Server ABAP=702
SAP NetWeaver Application Server ABAP=710
SAP NetWeaver Application Server ABAP=711
SAP NetWeaver Application Server ABAP=730
SAP NetWeaver Application Server ABAP=731
SAP NetWeaver Application Server ABAP=740
SAP NetWeaver Application Server ABAP=750
SAP NetWeaver Application Server ABAP=751
SAP NetWeaver Application Server ABAP=752
SAP NetWeaver Application Server ABAP=753
SAP NetWeaver Application Server ABAP=754
SAP NetWeaver Application Server ABAP=755
SAP NetWeaver Application Server ABAP=756
SAP NetWeaver Application Server ABAP=787
SAP NetWeaver Application Server ABAP=788
Event History
May 11, 2022
CVE Published
via MITRE·02:57 PM
Data Sourced
via MITRE·02:57 PM
DescriptionWeakness
Frequently Asked Questions
1
What is CVE-2022-29611?
CVE-2022-29611 is a vulnerability in SAP NetWeaver Application Server for ABAP and ABAP Platform that allows an authenticated user to escalate their privileges due to a lack of necessary authorization checks.
2
What is the severity of CVE-2022-29611?
CVE-2022-29611 has a severity rating of 8.8 (high).
3
Which SAP NetWeaver Application Server versions are affected by CVE-2022-29611?
CVE-2022-29611 affects SAP NetWeaver Application Server for ABAP versions 700 to 788.
4
How can I fix CVE-2022-29611?
To fix CVE-2022-29611, apply the necessary patches provided by SAP as mentioned in the SAP Note 3165801.
5
Where can I find more information about CVE-2022-29611?
You can find more information about CVE-2022-29611 in the SAP Note 3165801 and the SAP security advisory.