← CVE Intelligence

CVE-2024-39596

[CVE-2024-39596] Missing Authorization check vulnerability in SAP Enable Now PUBLISHED

Description (CNA)

Due to missing authorization checks, SAP Enable Now allows an author to escalate privileges to access information which should otherwise be restricted. On successful exploitation, the attacker can cause limited impact on confidentiality of the application.

Affected (CNA)

Vendor / productVersions
SAP_SE / SAP Enable Nowaffected WPB_MANAGER_CE 10; affected WPB_MANAGER_HANA 10; affected ENABLE_NOW_CONSUMP_DEL 1704

CWE

CWE-862

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.