CVE Vulnerabilities

CVE-2021-33689

Published: Jul 14, 2021 | Modified: Jul 16, 2021

CVSS 3.x

4.3

MEDIUM

Source:

NVD

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

CVSS 2.x

4 MEDIUM

RedHat/V2

RedHat/V3

Ubuntu

Additional information

NVD	https://nvd.nist.gov/vuln/detail/CVE-2021-33689
CWE	https://cwe.mitre.org/data/definitions/NVD-Other.html

When user with insufficient privileges tries to access any application in SAP NetWeaver Administrator (Administrator applications), version - 7.50, no security audit log is created. Therefore, security audit log Integrity is impacted.

Affected Software

Name	Vendor	Start Version	End Version
Netweaver_application_server_java	Sap	7.50 (including)	7.50 (including)

References

Aqua Container Security

Aqua Security is the largest pure-play cloud native security company, providing customers the freedom to innovate and run their businesses with minimal friction. The Aqua Cloud Native Security Platform provides prevention, detection, and response automation across the entire application lifecycle to secure the build, secure cloud infrastructure and secure running workloads wherever they are deployed.