description: SAP NetWeaver AS ABAP (Web Dynpro), versions - 731, 740, 750, 751, 752, 753, 754, 755, 782, allows an authenticated user to access Web Dynpro components, which reveals sensitive system information that would otherwise be restricted to highly privileged users because of missing authorization, resulting in Information Disclosure.
problem types: Information Disclosure
affected:
{
product: SAP NetWeaver AS ABAP (Web Dynpro)
vendor: SAP SE
versions:
status: affected, version: < 731
status: affected, version: < 740
status: affected, version: < 750
status: affected, version: < 751
status: affected, version: < 752
status: affected, version: < 753
status: affected, version: < 754
status: affected, version: < 755
status: affected, version: < 782
}
metrics:
cvssV3_0: [
attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 6.5
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: NONE
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
version: 3.0
]