Vulnerability · Published Sep 13, 2022 · Assigned by sap

CVE-2022-39801

High 7.5

In plain English

A high-severity improper authentication in SAP GRC Access Control Emergency Access Management from SAP SE. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.7% (higher than 54% of all known vulnerabilities).

Severity (CVSS 3.1)7.5High

Exploit odds (30 days)0.7%top 46.4% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

SAP GRC Access control Emergency Access Management allows an authenticated attacker to access a Firefighter session even after it is closed in Firefighter Logon Pad. This attack can be launched only within the firewall. On successful exploitation the attacker can gain access to admin session and completely compromise the application.

Affected products (as reported)

Vendor	Product	Versions
SAP SE	SAP GRC Access Control Emergency Access Management	V1100_700V1100_731V1200_750

Weakness: CWE-287 · Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

References

https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html x_refsource_MISC
https://launchpad.support.sap.com/#/notes/3237075 x_refsource_MISC