CWE Code: 20
Vulnerability Type: privilege_escalation
CVSS Score: 6.5
CWE Name:  Improper Input Validation
Summary: an attacker can use specially crafted inputs to execute commands on the host of a trex / bwa installation, sap basis, versions: 7.0 to 7.02, 7.10 to 7.11, 7.30, 7.31, 7.40 and 7.50 to 7.53. not all commands are possible, only those that can be executed by the <sid>adm user. the commands executed depend upon the privileges of the <sid>adm user.
Access Authentication: SINGLE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): PARTIAL/PARTIAL/PARTIAL
Published Date: 2018-11-13
Last Modified Date: 2019-02-01