Lucene search
SapCVE-2024-39591HistoryAug 13, 2024 - 5:15 a.m.
CVE-2024-39591
2024-08-1305:15:13
CWE-862
sap
web.nvd.nist.gov
24
sap
document builder
authorization checks
privilege escalation
confidentiality
CVSS3
5.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
AI Score
7.4
Confidence
High
EPSS
0.001
Percentile
17.7%
SAP Document Builder does not perform necessary authorization checks for one of the function modules resulting in escalation of privileges causing low impact on confidentiality of the application.
Affected configurations
Node
sapdocument_builderMatchs4fnd_102
ORsapdocument_builderMatchs4fnd_103
ORsapdocument_builderMatchs4fnd_104
ORsapdocument_builderMatchs4fnd_105
ORsapdocument_builderMatchs4fnd_106
ORsapdocument_builderMatchs4fnd_107
ORsapdocument_builderMatchs4fnd_108
ORsapdocument_builderMatchsap_bs_fnd_702
ORsapdocument_builderMatchsap_bs_fnd_731
ORsapdocument_builderMatchsap_bs_fnd_746
ORsapdocument_builderMatchsap_bs_fnd_747
ORsapdocument_builderMatchsap_bs_fnd_748
| Vendor | Product | Version | CPE |
|---|---|---|---|
| sap | document_builder | s4fnd_102 | cpe:2.3:a:sap:document_builder:s4fnd_102:*:*:*:*:*:*:* |
| sap | document_builder | s4fnd_103 | cpe:2.3:a:sap:document_builder:s4fnd_103:*:*:*:*:*:*:* |
| sap | document_builder | s4fnd_104 | cpe:2.3:a:sap:document_builder:s4fnd_104:*:*:*:*:*:*:* |
| sap | document_builder | s4fnd_105 | cpe:2.3:a:sap:document_builder:s4fnd_105:*:*:*:*:*:*:* |
| sap | document_builder | s4fnd_106 | cpe:2.3:a:sap:document_builder:s4fnd_106:*:*:*:*:*:*:* |
| sap | document_builder | s4fnd_107 | cpe:2.3:a:sap:document_builder:s4fnd_107:*:*:*:*:*:*:* |
| sap | document_builder | s4fnd_108 | cpe:2.3:a:sap:document_builder:s4fnd_108:*:*:*:*:*:*:* |
| sap | document_builder | sap_bs_fnd_702 | cpe:2.3:a:sap:document_builder:sap_bs_fnd_702:*:*:*:*:*:*:* |
| sap | document_builder | sap_bs_fnd_731 | cpe:2.3:a:sap:document_builder:sap_bs_fnd_731:*:*:*:*:*:*:* |
| sap | document_builder | sap_bs_fnd_746 | cpe:2.3:a:sap:document_builder:sap_bs_fnd_746:*:*:*:*:*:*:* |
CNA Affected
[
{
"defaultStatus": "unaffected",
"product": "SAP Document Builder",
"vendor": "SAP_SE",
"versions": [
{
"status": "affected",
"version": "S4FND 102"
},
{
"status": "affected",
"version": "S4FND 103"
},
{
"status": "affected",
"version": "S4FND 104"
},
{
"status": "affected",
"version": "S4FND 105"
},
{
"status": "affected",
"version": "S4FND 106"
},
{
"status": "affected",
"version": "S4FND 107"
},
{
"status": "affected",
"version": "S4FND 108"
},
{
"status": "affected",
"version": "SAP_BS_FND 702"
},
{
"status": "affected",
"version": "SAP_BS_FND 731"
},
{
"status": "affected",
"version": "SAP_BS_FND 746"
},
{
"status": "affected",
"version": "SAP_BS_FND 747"
},
{
"status": "affected",
"version": "SAP_BS_FND 748"
}
]
}
]Related
cvelist
cvelist
CVE-2024-39591 Missing Authorization check in SAP Document Builder
2024-08-13 05:00:42
vulnrichment
vulnrichment
CVE-2024-39591 Missing Authorization check in SAP Document Builder
2024-08-13 05:00:42
nvd
nvd
CVE-2024-39591
2024-08-13 05:15:13
CVSS3
5.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
AI Score
7.4
Confidence
High
EPSS
0.001
Percentile
17.7%
Related for CVE-2024-39591