4.3
CVE-2024-24741
- EPSS 0.32%
- Veröffentlicht 13.02.2024 04:15:08
- Zuletzt bearbeitet 21.11.2024 08:59:36
- Erkennungen
LoginMissing Authorization check in SAP Master Data Governance Material
SAP Master Data Governance for Material Data - versions 618, 619, 620, 621, 622, 800, 801, 802, 803, 804, does not perform necessary authorization check for an authenticated user, resulting in escalation of privileges. This could allow an attacker to read some sensitive information but no impact to integrity and availability.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
SAP ≫ Master Data Governance For Material Data Version 618
SAP ≫ Master Data Governance For Material Data Version 619
SAP ≫ Master Data Governance For Material Data Version 620
SAP ≫ Master Data Governance For Material Data Version 621
SAP ≫ Master Data Governance For Material Data Version 622
SAP ≫ Master Data Governance For Material Data Version 800
SAP ≫ Master Data Governance For Material Data Version 801
SAP ≫ Master Data Governance For Material Data Version 802
SAP ≫ Master Data Governance For Material Data Version 803
SAP ≫ Master Data Governance For Material Data Version 804
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.32% | 0.234 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 4.3 | 2.8 | 1.4 |
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
|
| SAP | 4.3 | 2.8 | 1.4 |
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
|
CWE-862 Missing Authorization
The product does not perform an authorization check when an actor attempts to access a resource or perform an action.
https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html
https://me.sap.com/notes/2897391