Lucene search

K
prionPRIOn knowledge basePRION:CVE-2024-27900
HistoryMar 12, 2024 - 1:15 a.m.

Authorization

2024-03-1201:15:00
PRIOn knowledge base
www.prio-n.com
6
sap abap platform
missing authorization check
change
job templates
privacy settings
unauthorized access

4.6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.0%

Due to missing authorization check, attacker with business user account in SAP ABAP Platform - version 758, 795, can change the privacy setting of job templates from shared to private. As a result, the selected template would only be accessible to the owner.

4.6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.0%

Related for PRION:CVE-2024-27900