Input validation error in SAP Cloud Connector - CVE-2021-33693
Published: August 13, 2021
Vulnerability identifier: #VU55835
CSH Severity: Medium
CVSS v4: 7.6 [CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2021-33693
CWE-ID: CWE-20
Exploitation vector: Adjecent network
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to bypass implemented security restrictions.
The vulnerability exists due to insufficient validation of user-supplied input. A remote non-authenticated attacker on the local network can send specially crafted input to the application and bypass security restrictions.
Successful vulnerability exploitation may result in information disclosure or unauthorized data modification.
Affected software
SAP Cloud Connector
How to mitigate CVE-2021-33693
Install updates from vendor's website.