Critical severity · published Sep 12, 2023
CVE-2023-40309
SAP CommonCryptoLib does not perform necessary authentication checks, which may result in missing or wrong authorization checks for an authenticated user, resulting in escalation…
9.8
CVSS
0.9%
EPSS
No
On KEV
Description
SAP CommonCryptoLib does not perform necessary authentication checks, which may result in missing or wrong authorization checks for an authenticated user, resulting in escalation of privileges. Depending on the application and the level of privileges acquired, an attacker could abuse functionality restricted to a particular user group as well as read, modify or delete restricted data.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.9% · higher than 59% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CO
Commoncryptolib · Sap
8.0.0 · source: NVD
CS
Content Server · Sap
6.50; 7.53; 7.54 · source: NVD
EA
Extended Application Services And Runtime · Sap
1.0 · source: NVD
HD
Hana Database · Sap
2.0 · source: NVD
HA
Host Agent · Sap
722 · source: NVD
NA
Netweaver Application Server Abap · Sap
7.22ext; kernel_7.22; kernel_7.53; kernel_7.54; kernel_7.77; kernel_7.85; +11 more · source: NVD
NA
Netweaver Application Server Java · Sap
kernel_7.22; kernel_7.53; kernel_7.54; kernel_7.77; kernel_7.85; kernel_7.89; +10 more · source: NVD
SA
Sapssoext · Sap
17.0 · source: NVD
WD
Web Dispatcher · Sap
7.22ext; 7.53; 7.54; 7.77; 7.85; 7.89 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2023-40309
CVE.org
https://www.cve.org/CVERecord?id=CVE-2023-40309
Permissions Required
https://me.sap.com/notes/3340576
Vendor Advisory
https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html
More from Commoncryptolib
7.5
CVE-2023-40308
SAP CommonCryptoLib allows an unauthenticated attacker to craft a request, which when submitted to an open port causes a memory corruption error in a library which in turn causes…
7.5
CVE-2021-38177
SAP CommonCryptoLib version 8.5.38 or lower is vulnerable to null pointer dereference vulnerability when an unauthenticated attacker sends crafted malicious data in the HTTP…
–
CVE-2014-8587
SAPCRYPTOLIB before 5.555.38, SAPSECULIB, and CommonCryptoLib before 8.4.30, as used in SAP NetWeaver AS for ABAP and SAP HANA, allows remote attackers to spoof Digital Signature…