5.0Orta
CVE-2026-0486Missing Authorization Check in ABAP based SAP systems
Açıklama
In ABAP based SAP systems a remote enabled function module does not perform necessary authorization checks for an authenticated user resulting in disclosure of system information.This has low impact on confidentiality. Integrity and availability are not impacted.
Zayıflık türü (CWE):
CWE-862
Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.
Etkilenen ürünler ve sürümler
| Üretici | Ürün | Sürümler | |
|---|---|---|---|
| sap | solution tools plug-in | 740 | |
| SAP_SE | ABAP based SAP systems | ST-PI 2005_1_700, 2008_1_710, 740, 758 |
Kaynaklar ve yamalar
- https://me.sap.com/notes/3691645
- https://url.sap/sapsecuritypatchday Vendor Advisory
CPE eşleşmeleri (NVD) (4)
cpe:2.3:a:sap:solution_tools_plug-in:740:*:*:*:*:*:*:*cpe:2.3:a:sap:solution_tools_plug-in:758:*:*:*:*:*:*:*cpe:2.3:a:sap:solution_tools_plug-in:2005_1_700:*:*:*:*:*:*:*cpe:2.3:a:sap:solution_tools_plug-in:2008_1_710:*:*:*:*:*:*:*