Lucene search
HistoryAug 13, 2024 - 5:15 a.m.
CVE-2024-41734
cve-2024-41734
sap netweaver
auth check
disclosure
user information
CVSS3
4.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
EPSS
0
Percentile
14.7%
Due to missing authorization check in SAP NetWeaver Application Server ABAP and ABAP Platform, an authenticated attacker could call an underlying transaction, which leads to disclosure of user related information. There is no impact on integrity or availability.
Affected configurations
Node
sapnetweaver_application_server_abapMatchsap_basis_700
ORsapnetweaver_application_server_abapMatchsap_basis_701
ORsapnetweaver_application_server_abapMatchsap_basis_702
ORsapnetweaver_application_server_abapMatchsap_basis_731
ORsapnetweaver_application_server_abapMatchsap_basis_740
ORsapnetweaver_application_server_abapMatchsap_basis_750
ORsapnetweaver_application_server_abapMatchsap_basis_751
ORsapnetweaver_application_server_abapMatchsap_basis_752
ORsapnetweaver_application_server_abapMatchsap_basis_753
ORsapnetweaver_application_server_abapMatchsap_basis_754
ORsapnetweaver_application_server_abapMatchsap_basis_755
ORsapnetweaver_application_server_abapMatchsap_basis_756
ORsapnetweaver_application_server_abapMatchsap_basis_757
ORsapnetweaver_application_server_abapMatchsap_basis_758
ORsapnetweaver_application_server_abapMatchsap_basis_912
| Vendor | Product | Version | CPE |
|---|---|---|---|
| sap | netweaver_application_server_abap | sap_basis_700 | cpe:2.3:a:sap:netweaver_application_server_abap:sap_basis_700:*:*:*:*:*:*:* |
| sap | netweaver_application_server_abap | sap_basis_701 | cpe:2.3:a:sap:netweaver_application_server_abap:sap_basis_701:*:*:*:*:*:*:* |
| sap | netweaver_application_server_abap | sap_basis_702 | cpe:2.3:a:sap:netweaver_application_server_abap:sap_basis_702:*:*:*:*:*:*:* |
| sap | netweaver_application_server_abap | sap_basis_731 | cpe:2.3:a:sap:netweaver_application_server_abap:sap_basis_731:*:*:*:*:*:*:* |
| sap | netweaver_application_server_abap | sap_basis_740 | cpe:2.3:a:sap:netweaver_application_server_abap:sap_basis_740:*:*:*:*:*:*:* |
| sap | netweaver_application_server_abap | sap_basis_750 | cpe:2.3:a:sap:netweaver_application_server_abap:sap_basis_750:*:*:*:*:*:*:* |
| sap | netweaver_application_server_abap | sap_basis_751 | cpe:2.3:a:sap:netweaver_application_server_abap:sap_basis_751:*:*:*:*:*:*:* |
| sap | netweaver_application_server_abap | sap_basis_752 | cpe:2.3:a:sap:netweaver_application_server_abap:sap_basis_752:*:*:*:*:*:*:* |
| sap | netweaver_application_server_abap | sap_basis_753 | cpe:2.3:a:sap:netweaver_application_server_abap:sap_basis_753:*:*:*:*:*:*:* |
| sap | netweaver_application_server_abap | sap_basis_754 | cpe:2.3:a:sap:netweaver_application_server_abap:sap_basis_754:*:*:*:*:*:*:* |
Related
cve
cve
CVE-2024-41734
2024-08-13 05:15:13
cvelist
cvelist
vulnrichment
vulnrichment
nessus
nessus
SAP NetWeaver AS ABAP Missing Authorization (3494349)
2024-08-15 00:00:00
CVSS3
4.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
EPSS
0
Percentile
14.7%
Related for NVD:CVE-2024-41734