Description
SAP NetWeaver Application Server Java Platforms contains a missing authentication for critical function vulnerability allowing unauthenticated access to execute configuration tasks and create administrative users.
Full record on cve.org →Affected packages
| Package | Vendor / Product | Version range | Status |
|---|---|---|---|
| SAP NetWeaver AS JAVA (LM Configuration Wizard) | SAP SE / SAP NetWeaver AS JAVA (LM Configuration Wizard) | < 7.30 | affected |
| SAP NetWeaver AS JAVA (LM Configuration Wizard) | SAP SE / SAP NetWeaver AS JAVA (LM Configuration Wizard) | < 7.31 | affected |
| SAP NetWeaver AS JAVA (LM Configuration Wizard) | SAP SE / SAP NetWeaver AS JAVA (LM Configuration Wizard) | < 7.40 | affected |
| SAP NetWeaver AS JAVA (LM Configuration Wizard) | SAP SE / SAP NetWeaver AS JAVA (LM Configuration Wizard) | < 7.50 | affected |