CVE-2023-40309

SAP CommonCryptoLib does not perform necessary authentication checks, which may result in missing or wrong authorization checks for an authenticated user, resulting in escalation of privileges. Depending on the application and the level of privileges acquired, an attacker could abuse functionality restricted to a particular user group as well as read, modify or delete restricted data.

• Sap Commoncryptolib

  APP
  Sap
  8.0.0

• Sap Content Server

  APP
  Sap
  6.507.537.54

• Sap Extended Application Services And Runtime

  APP
  Sap
  1.0

• Sap Hana Database

  APP
  Sap
  2.0

• Sap Host Agent

  APP
  Sap
  722

• Sap Netweaver Application Server Abap

  APP
  Sap
  7.22extkernel64nuc_7.22kernel64nuc_7.22extkernel64uc_7.22kernel64uc_7.22extkernel64uc_7.53kernel64uc_8.04kernel_7.22kernel_7.53kernel_7.54kernel_7.77kernel_7.85kernel_7.89kernel_7.91kernel_7.92+ 2 more

• Sap Netweaver Application Server Java

  APP
  Sap
  kernel64nuc_7.22kernel64nuc_7.22extkernel64uc_7.22kernel64uc_7.22extkernel64uc_7.53kernel64uc_8.04kernel_7.22kernel_7.53kernel_7.54kernel_7.77kernel_7.85kernel_7.89kernel_7.91kernel_7.92kernel_7.93+ 1 more

• Sap Sapssoext

  APP
  Sap
  17.0

• Sap Web Dispatcher

  APP
  Sap
  7.22ext7.537.547.777.857.89