Description
SAP Kernel (ABAP Debugger), versions KRNL32NUC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL32UC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL64NUC 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49, KRNL64UC 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49, 7.73, KERNEL 7.21, 7.49, 7.53, 7.73, 7.75, 7.76, 7.77, allows a user to execute “Go to statement” without possessing the authorization S_DEVELOP DEBUG 02, resulting in Missing Authorization Check
Metrics
CVSS 3.0 7.2/10
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:HWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| SAP SE | SAP Kernel (KRNL32NUC) | < 7.21; < 7.21EXT; < 7.22; < 7.22EXT |
| SAP SE | SAP Kernel (KRNL32UC) | < 7.21; < 7.21EXT; < 7.22; < 7.22EXT |
| SAP SE | SAP Kernel (KRNL64NUC) | < 7.21; < 7.21EXT; < 7.22; < 7.22EXT; < 7.49 |
| SAP SE | SAP Kernel (KRNL64UC) | < 7.21; < 7.21EXT; < 7.22; < 7.22EXT; < 7.49; < 7.73 |
| SAP SE | SAP Kernel (KERNEL) | < 7.21; < 7.49; < 7.53; < 7.73; < 7.75; < 7.76; < 7.77 |
References
- https://launchpad.support.sap.com/#/notes/2798743Permissions Required, Vendor Advisory
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=523998017Vendor Advisory
- https://launchpad.support.sap.com/#/notes/2798743Permissions Required, Vendor Advisory
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=523998017Vendor Advisory
Timeline
- Published
- Aug 14, 2019
- Last modified
- Jun 17, 2026
- NVD status
- Modified