What is CVE-2017-16679?

CVE-2017-16679 is a medium-severity vulnerability in Sap Sap_kernel, classified under URL Redirection to Untrusted Site (Open Redirect). CVSS score: 6.1/10. Published 2017-12-12.

How severe is CVE-2017-16679?

Medium severity. CVSS v3 base score is 6.1 out of 10.

Open Redirect in Sap Sap_kernel

CVE-2017-16679

URL redirection vulnerability in SAP's Startup Service, SAP KERNEL 32 NUC, SAP KERNEL 32 Unicode, SAP KERNEL 64 NUC, SAP KERNEL 64 Unicode 7.21, 7.21EXT, 7.22 and 7.22EXT; SAP KERNEL 7.21, 7.22, 7.45, 7.49 and 7.52, that allows an attacker…

Vulnerability class: Open Redirect

EPSS: 0.009 (54.2th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.1 (Medium). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N.

Affected products

Sap Sap_kernel — versions 7.21, 7.21ext, 7.22
Sap Startup Service — versions SAP KERNEL 32 NUC, SAP KERNEL 32 Unicode, SAP KERNEL 64 NUC, SAP KERNEL 64 Unicode 7.21, 7.21EXT, 7.22 and 7.22EXT; SAP KERNEL 7.21, 7.22, 7.45, 7.49 and 7.52.

Weakness classification (CWE)

CWE-601 — URL Redirection to Untrusted Site (Open Redirect)

References

cna@sap.com (x_refsource_CONFIRM, Issue Tracking, Vendor Advisory)
cna@sap.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)
cna@sap.com (Vendor Advisory, Permissions Required, x_refsource_CONFIRM)

Frequently asked questions

What is CVE-2017-16679?: CVE-2017-16679 is a medium-severity vulnerability in Sap Sap_kernel, classified under URL Redirection to Untrusted Site (Open Redirect). CVSS score: 6.1/10. Published 2017-12-12.
How severe is CVE-2017-16679?: Medium severity. CVSS v3 base score is 6.1 out of 10.