Lucene search

SapCVE-2024-24741

HistoryFeb 13, 2024 - 4:15 a.m.

CVE-2024-24741

2024-02-1304:15:08

CWE-862

sap

web.nvd.nist.gov

cve-2024-24741

sap

master data governance

authorization check

escalation of privileges

information security

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

AI Score

4.6

Confidence

High

EPSS

Percentile

9.0%

JSON

SAP Master Data Governance for Material Data - versions 618, 619, 620, 621, 622, 800, 801, 802, 803, 804, does not perform necessary authorization check for an authenticated user, resulting in escalation of privileges. This could allow an attacker to read some sensitive information but no impact to integrity and availability.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "SAP Master Data Governance Material",
    "vendor": "SAP_SE",
    "versions": [
      {
        "status": "affected",
        "version": "618"
      },
      {
        "status": "affected",
        "version": "619"
      },
      {
        "status": "affected",
        "version": "620"
      },
      {
        "status": "affected",
        "version": "621"
      },
      {
        "status": "affected",
        "version": "622"
      },
      {
        "status": "affected",
        "version": "800"
      },
      {
        "status": "affected",
        "version": "801"
      },
      {
        "status": "affected",
        "version": "802"
      },
      {
        "status": "affected",
        "version": "803"
      },
      {
        "status": "affected",
        "version": "804"
      }
    ]
  }
]

References

me.sap.com/notes/2897391

www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

AI Score

4.6

Confidence

High

EPSS

Percentile

9.0%

JSON

Related for CVE-2024-24741