← CVE Intelligence

CVE-2024-39591

Missing Authorization check in SAP Document Builder PUBLISHED

Description (CNA)

SAP Document Builder does not perform necessary authorization checks for one of the function modules resulting in escalation of privileges causing low impact on confidentiality of the application.

Affected (CNA)

Vendor / productVersions
SAP_SE / SAP Document Builderaffected S4FND 102; affected S4FND 103; affected S4FND 104; affected S4FND 105; affected S4FND 106; affected S4FND 107; affected S4FND 108; affected SAP_BS_FND 702; affected SAP_BS_FND 731; affected SAP_BS_FND 746; affected SAP_BS_FND 747; affected SAP_BS_FND 748

CWE

CWE-862

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.