CVE-2021-27609 Missing authorization in SAP Focused RUN

What is CVE-2021-27609?

CVE-2021-27609 is a medium-severity missing authorization vulnerability in SAP Focused RUN, published on 13 Apr 2021. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

SAP Focused RUN versions 200, 300, does not perform necessary authorization checks for an authenticated user, which allows a user to call the oData service and manipulate the activation for the SAP EarlyWatch Alert service data collection and sending to SAP without the intended authorization.

Weakness: CWE-862

Which versions are affected by CVE-2021-27609?

It affects 1 product.

Products include Sap Focused Run.

How do I fix CVE-2021-27609?

No fix has been published for CVE-2021-27609 yet. Limit exposure of the affected software until one is available.

Upgrade, and check permissions on every request on the server, not only in the interface. More about Missing authorization.

Is CVE-2021-27609 being exploited?

There is no known exploitation of CVE-2021-27609 in the wild and no public exploit code.

Other vulnerabilities in SAP Focused RUN

• CVE-2020-6369 Hardcoded credentials in CA Introscope Enterprise Manager (Affected products: SAP Solution Manager and SAP Focused Run) High 7.5
• CVE-2022-24399 Cross-site scripting in SAP Focused Run (Real User Monitoring) Medium 6.1
• CVE-2022-27657 Path traversal in SAP Focused Run (Simple Diagnostics Agent) Low 2.7

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-89c5-cmj9-mcpm.