PT-2021-20267 · Sap · Sap Netweaver Administrator

Published 2021-07-14 · Updated 2021-07-16 · CVE-2021-33689

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver Administrator version 7.50

Description: The issue occurs when a user with insufficient privileges attempts to access any application in the Administrator applications, resulting in no security audit log being created. This impacts the integrity of the security audit log.

Recommendations: For version 7.50, update to a version that includes a fix for this issue to ensure security audit logs are properly created for all access attempts, regardless of user privileges.

Fix

Weakness Enumeration

CWE-778

Related Identifiers

CVE-2021-33689

Affected Products

Sap Netweaver Administrator

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2021-33689 · Security Note
• https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=580617506 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-33689 · Vendor Advisory
• https://t.me/cvenotify/17586 · Telegram Post
• https://launchpad.support.sap.com/#/notes/3038594 · Note
• https://t.me/cvenotify/17585 · Telegram Post