CVE-2021-21483 Information disclosure in SAP Solution Manager
A high-privileged attacker can access sensitive information in SAP Solution Manager, compromising application confidentiality.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2021-21483?
CVE-2021-21483 is a high-severity vulnerability in SAP Solution Manager, published on 13 Apr 2021. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
Under certain conditions SAP Solution Manager, version - 720, allows a high privileged attacker to get access to sensitive information which has a direct serious impact beyond the exploitable component thereby affecting the confidentiality in the application.
Which versions are affected by CVE-2021-21483?
It affects 1 product.
Products include Sap Solution Manager.
How do I fix CVE-2021-21483?
No fix has been published for CVE-2021-21483 yet. Limit exposure of the affected software until one is available.
Is CVE-2021-21483 being exploited?
There is no known exploitation of CVE-2021-21483 in the wild and no public exploit code.
Other vulnerabilities in SAP Solution Manager
- CVE-2020-6207 SAP Solution Manager Missing Authentication for Critical Function
- CVE-2020-26821 Missing authorization in SAP Solution Manager (JAVA stack)
- CVE-2020-26822 Missing authorization in SAP Solution Manager (JAVA stack)
- CVE-2020-26823 Missing authorization in SAP Solution Manager (JAVA stack)
- CVE-2020-26824 Missing authorization in SAP Solution Manager (JAVA stack)
Sources
Also known as GHSA-p5hv-2q3f-32vv.