PT-2021-14535 · Sap · Sap Banking Services

Published 2021-01-12 · Updated 2022-10-06 · CVE-2021-21467

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions SAP Banking Services (Generic Market Data) (affected versions not specified)

Description The issue is related to improper authorization checks, allowing an unauthorized user to access restricted Business Partner Generic Market Data (GMD). This results in an escalation of privileges for authenticated users.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2021-21467

Affected Products

Sap Banking Services

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2021-21467 · Security Note
• https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=564760476 · Vendor Advisory
• https://launchpad.support.sap.com/#/notes/3008422 · Vendor Advisory