Lucene search

K
nvd[email protected]NVD:CVE-2024-37176
HistoryJun 11, 2024 - 3:15 a.m.

CVE-2024-37176

2024-06-1103:15:12
CWE-862
web.nvd.nist.gov
4
cve-2024-37176
sap bw/4hana
transformation
data transfer
process
authorization checks
privilege escalation
confidentiality
integrity
availability

5.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:L

0.0004 Low

EPSS

Percentile

9.1%

SAP BW/4HANA Transformation and Data Transfer
Process (DTP) allows an authenticated attacker to gain higher access levels
than they should have by exploiting improper authorization checks. This results
in escalation of privileges. It has no impact on the confidentiality of data
but may have low impacts on the integrity and availability of the application.

5.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:L

0.0004 Low

EPSS

Percentile

9.1%

Related for NVD:CVE-2024-37176