SAP NetWeaver (Change and Transport System) - versions 702, 731, 740, 750, 751, 752, 753, 754, 755, 756, 757, allows an authenticated user with admin privileges to maliciously run a benchmark program repeatedly in intent to slowdown or make the server unavailable which may lead to a limited impact on Availability with No impact on Confidentiality and Integrity of the application.
The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Netweaver | Sap | 702 (including) | 702 (including) |
| Netweaver | Sap | 731 (including) | 731 (including) |
| Netweaver | Sap | 740 (including) | 740 (including) |
| Netweaver | Sap | 750 (including) | 750 (including) |
| Netweaver | Sap | 751 (including) | 751 (including) |
| Netweaver | Sap | 752 (including) | 752 (including) |
| Netweaver | Sap | 753 (including) | 753 (including) |
| Netweaver | Sap | 754 (including) | 754 (including) |
| Netweaver | Sap | 755 (including) | 755 (including) |
| Netweaver | Sap | 756 (including) | 756 (including) |
| Netweaver | Sap | 757 (including) | 757 (including) |