CVE-2026-27688
|
| |
|
|
Software afectado |
SAP |
|
|
|
Due to a missing authorization check in SAP NetWeaver Application Server for ABAP, an authenticated attacker with user privileges could read Database Analyzer Log Files via a specific RFC function module. The attacker with the necessary privileges to execute this function module could potentially escalate their privileges and read the sensitive data, resulting in a limited impact on the confidentiality of the information stored. However, the integrity and availability of the system are not affected. |
Link: |
| https://nvd.nist.gov/vuln/detail/CVE-2026-27688 |
