发布日期：2021-10-12
更新日期：2021-11-25

受影响系统：

SAP NetWeaver AS ABAP 756
SAP NetWeaver AS ABAP 755
SAP NetWeaver AS ABAP 754
SAP NetWeaver AS ABAP 753
SAP NetWeaver AS ABAP 752
SAP NetWeaver AS ABAP 751
SAP NetWeaver AS ABAP 750
SAP NetWeaver AS ABAP 740
SAP NetWeaver AS ABAP 731
SAP NetWeaver AS ABAP 730
SAP NetWeaver AS ABAP 710
SAP NetWeaver AS ABAP 702
SAP NetWeaver AS ABAP 701
SAP NetWeaver AS ABAP 700
SAP NetWeaver ABAP Platform 756
SAP NetWeaver ABAP Platform 755
SAP NetWeaver ABAP Platform 754
SAP NetWeaver ABAP Platform 753
SAP NetWeaver ABAP Platform 752
SAP NetWeaver ABAP Platform 751
SAP NetWeaver ABAP Platform 750
SAP NetWeaver ABAP Platform 740
SAP NetWeaver ABAP Platform 731
SAP NetWeaver ABAP Platform 730
SAP NetWeaver ABAP Platform 710
SAP NetWeaver ABAP Platform 702
SAP NetWeaver ABAP Platform 701
SAP NetWeaver ABAP Platform 700

描述：

---

CVE(CAN) ID: CVE-2021-38178

SAP NetWeaver AS是德国思爱普（SAP）公司的一款SAP网络应用服务器。它不仅能提供网络服务，且还是SAP软件的基本平台。
SAP NetWeaver AS ABAP和ABAP Platform 700、701、702、710、730、731、740、750、751、752、753、754、755和756版本存在授权错误漏洞。攻击者可利用该漏洞通过传输ABAP代码工件或内容绕过已建立的质量门。

<**>

建议：

---

厂商补丁：

SAP
---
目前厂商已经发布了升级补丁以修复这个安全问题，补丁获取链接：

https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=587169983

浏览次数：731
严重程度：0（网友投票）