4.3

CVE-2024-41734

Missing Authorization check in SAP NetWeaver Application Server ABAP and ABAP Platform

Due to missing authorization check in SAP NetWeaver Application Server ABAP and ABAP Platform, an authenticated attacker could call an underlying transaction, which leads to disclosure of user related information. There is no impact on integrity or availability.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
SAP ≫ Netweaver Application Server Abap Version sap_basis_700
SAP ≫ Netweaver Application Server Abap Version sap_basis_701
SAP ≫ Netweaver Application Server Abap Version sap_basis_702
SAP ≫ Netweaver Application Server Abap Version sap_basis_731
SAP ≫ Netweaver Application Server Abap Version sap_basis_740
SAP ≫ Netweaver Application Server Abap Version sap_basis_750
SAP ≫ Netweaver Application Server Abap Version sap_basis_751
SAP ≫ Netweaver Application Server Abap Version sap_basis_752
SAP ≫ Netweaver Application Server Abap Version sap_basis_753
SAP ≫ Netweaver Application Server Abap Version sap_basis_754
SAP ≫ Netweaver Application Server Abap Version sap_basis_755
SAP ≫ Netweaver Application Server Abap Version sap_basis_756
SAP ≫ Netweaver Application Server Abap Version sap_basis_757
SAP ≫ Netweaver Application Server Abap Version sap_basis_758
SAP ≫ Netweaver Application Server Abap Version sap_basis_912
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.26% 0.173
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 4.3 2.8 1.4
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
SAP 4.3 2.8 1.4
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CWE-862 Missing Authorization

The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

https://url.sap/sapsecuritypatchday
Vendor Advisory
https://me.sap.com/notes/3494349
Permissions Required