CVE-2023-27269

SAP NetWeaver Application Server for ABAP and ABAP Platform - versions 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 756, 757, 791, allows an attacker with non-administrative authorizations to exploit a directory traversal flaw in an available service to overwrite the system files. In this attack, no data can be read but potentially critical OS files can be overwritten making the system unavailable.

CVSS v3 9.6 CRITICAL

9.6^/10

CVSS v3 : CRITICAL

Vector :

Exploitability : 3.1 / Impact : 5.8

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact HIGH

Availability Impact HIGH

Scope CHANGED

References

Link	Resource
https://launchpad.support.sap.com/#/notes/3294595	Permissions Required
https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:sap:netweaver_application_server_abap:700:::::::*
	cpe:2.3:a:sap:netweaver_application_server_abap:701:::::::*
	cpe:2.3:a:sap:netweaver_application_server_abap:702:::::::*
	cpe:2.3:a:sap:netweaver_application_server_abap:731:::::::*
	cpe:2.3:a:sap:netweaver_application_server_abap:740:::::::*
	cpe:2.3:a:sap:netweaver_application_server_abap:750:::::::*
	cpe:2.3:a:sap:netweaver_application_server_abap:751:::::::*
	cpe:2.3:a:sap:netweaver_application_server_abap:752:::::::*
	cpe:2.3:a:sap:netweaver_application_server_abap:753:::::::*
	cpe:2.3:a:sap:netweaver_application_server_abap:754:::::::*
	cpe:2.3:a:sap:netweaver_application_server_abap:755:::::::*
	cpe:2.3:a:sap:netweaver_application_server_abap:756:::::::*
	cpe:2.3:a:sap:netweaver_application_server_abap:757:::::::*
	cpe:2.3:a:sap:netweaver_application_server_abap:791:::::::*

History

No history.

Information

Published : 2023-03-14 05:15

Updated : 2023-04-11 04:16

NVD link : CVE-2023-27269

Mitre link : CVE-2023-27269

CVE.ORG link : CVE-2023-27269

JSON object : View

Products Affected

sap

netweaver_application_server_abap

CWE

CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

{"id": "CVE-2023-27269", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 9.6, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "impactScore": 5.8, "exploitabilityScore": 3.1}, {"type": "Secondary", "source": "cna@sap.com", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 9.6, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "impactScore": 5.8, "exploitabilityScore": 3.1}]}, "published": "2023-03-14T05:15:30.507", "references": [{"url": "https://launchpad.support.sap.com/#/notes/3294595", "tags": ["Permissions Required"], "source": "cna@sap.com"}, {"url": "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html", "tags": ["Vendor Advisory"], "source": "cna@sap.com"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "cna@sap.com", "description": [{"lang": "en", "value": "CWE-22"}]}, {"type": "Secondary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-22"}]}], "descriptions": [{"lang": "en", "value": "SAP NetWeaver Application Server for ABAP and ABAP Platform - versions 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 756, 757, 791, allows an attacker with non-administrative authorizations to exploit a directory traversal flaw in an available service to overwrite the system files. \u00a0In this attack, no data can be read but potentially critical OS files can be overwritten making the system unavailable.\n\n"}], "lastModified": "2023-04-11T04:16:05.897", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:sap:netweaver_application_server_abap:700:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C5A3C915-0E5F-4B1A-B1EB-5ADEA517F620"}, {"criteria": "cpe:2.3:a:sap:netweaver_application_server_abap:701:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "98B2522A-B850-4EC2-B2F2-5EBF36801B39"}, {"criteria": "cpe:2.3:a:sap:netweaver_application_server_abap:702:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "706FEB9E-3EE9-405E-A8C9-733DAF68AC6D"}, {"criteria": "cpe:2.3:a:sap:netweaver_application_server_abap:731:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5CC29738-CF17-4E6B-9C9E-879B17F7E001"}, {"criteria": "cpe:2.3:a:sap:netweaver_application_server_abap:740:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "127E508F-6CC1-41C8-96DF-8D14FFDD4020"}, {"criteria": "cpe:2.3:a:sap:netweaver_application_server_abap:750:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7777AA80-1608-420E-B7D5-09ABECD51728"}, {"criteria": "cpe:2.3:a:sap:netweaver_application_server_abap:751:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0539618A-1C4D-463F-B2BB-DD1C239C23EB"}, {"criteria": "cpe:2.3:a:sap:netweaver_application_server_abap:752:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "62828DCD-F80E-4C7C-A988-EFEA06A5223E"}, {"criteria": "cpe:2.3:a:sap:netweaver_application_server_abap:753:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D9F38585-73AE-4DBB-A978-F0272DF8FB58"}, {"criteria": "cpe:2.3:a:sap:netweaver_application_server_abap:754:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D416C064-BB8A-4230-A761-84A93E017F79"}, {"criteria": "cpe:2.3:a:sap:netweaver_application_server_abap:755:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6B8D3EA0-28E6-4333-8C67-B9D3775EB9BC"}, {"criteria": "cpe:2.3:a:sap:netweaver_application_server_abap:756:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "72491771-4492-4902-9F0C-CE6A60BAA705"}, {"criteria": "cpe:2.3:a:sap:netweaver_application_server_abap:757:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "421A5354-F764-402B-A3A4-2D746EACEB46"}, {"criteria": "cpe:2.3:a:sap:netweaver_application_server_abap:791:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "312DBCA5-D3F6-4F42-B632-34759D799856"}], "operator": "OR"}]}], "sourceIdentifier": "cna@sap.com"}