CVE-2019-0349: vulnerability in SAP Kernel (KERNEL)
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 1.2%
SAP Kernel (ABAP Debugger), versions KRNL32NUC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL32UC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL64NUC 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49, KRNL64UC 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49, 7.73, KERNEL 7.21, 7.49, 7.53, 7.73, 7.75, 7.76, 7.77, allows a user to execute “Go to statement” without possessing the authorization S_DEVELOP DEBUG 02, resulting in Missing Authorization Check
Affected products
SAP SE · SAP Kernel (KERNEL)SAP SE · SAP Kernel (KRNL32NUC)SAP SE · SAP Kernel (KRNL32UC)SAP SE · SAP Kernel (KRNL64NUC)SAP SE · SAP Kernel (KRNL64UC)Related CVEs — SAP Kernel (KERNEL)
In the same product, most dangerous first.