CWE Code: 285
Vulnerability Type: privilege_escalation
CVSS Score: 6.5
CWE Name:  Improper Authorization
Summary: abap basis function modules inst_create_r3_rfc_dest, inst_create_tcpip_rfcdest, and inst_create_tcpip_rfc_dest in sap basis (fixed in versions 7.0 to 7.02, 7.10 to 7.30, 7.31, 7.40, 7.50 to 7.53) do not perform necessary authorization checks in all circumstances for an authenticated user, resulting in escalation of privileges.
Access Authentication: SINGLE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): PARTIAL/PARTIAL/PARTIAL
Published Date: 2019-04-10
Last Modified Date: 2019-04-12