5.3

CVE-2024-39591

Missing Authorization check in SAP Document Builder

SAP Document Builder does not perform necessary authorization checks for one of the function modules resulting in escalation of privileges causing low impact on confidentiality of the application.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
SAP ≫ Document Builder Version s4fnd_102
SAP ≫ Document Builder Version s4fnd_103
SAP ≫ Document Builder Version s4fnd_104
SAP ≫ Document Builder Version s4fnd_105
SAP ≫ Document Builder Version s4fnd_106
SAP ≫ Document Builder Version s4fnd_107
SAP ≫ Document Builder Version s4fnd_108
SAP ≫ Document Builder Version sap_bs_fnd_702
SAP ≫ Document Builder Version sap_bs_fnd_731
SAP ≫ Document Builder Version sap_bs_fnd_746
SAP ≫ Document Builder Version sap_bs_fnd_747
SAP ≫ Document Builder Version sap_bs_fnd_748
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.26% 0.176
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5.3 3.9 1.4
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
SAP 4.3 2.8 1.4
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CWE-862 Missing Authorization

The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

https://url.sap/sapsecuritypatchday
Vendor Advisory
https://me.sap.com/notes/3477423
Permissions Required