← CVE Intelligence

CVE-2024-37172

[CVE-2024-37172] Missing Authorization check in SAP S/4HANA Finance (Advanced Payment Management) PUBLISHED

Description (CNA)

SAP S/4HANA Finance (Advanced Payment Management) does not perform necessary authorization check for an authenticated user, resulting in escalation of privileges. As a result, it has a low impact to confidentiality and availability but there is no impact on the integrity.

Affected (CNA)

Vendor / productVersions
SAP_SE / SAP S/4HANA Finance (Advanced Payment Management)affected S4CORE 107; affected S4CORE 108

CWE

CWE-862

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.