CVE-2024-41728 — Missing Authorization check in SAP NetWeaver Application Server for ABAP and ABAP Platform

CVE-2024-41728

Missing Authorization check in SAP NetWeaver Application Server for ABAP and ABAP Platform PUBLISHED

Description (CNA)

Due to missing authorization check, SAP NetWeaver Application Server for ABAP and ABAP Platform allows an attacker logged in as a developer to read objects contained in a package. This causes an impact on confidentiality, as this attacker would otherwise not have access to view these objects.

Affected (CNA)

Vendor / product	Versions
SAP_SE / SAP NetWeaver Application Server for ABAP and ABAP Platform	affected 700; affected 701; affected 702; affected 731; affected 740; affected 750; affected 751; affected 752; affected 753; affected 754; affected 755; affected 756; affected 757; affected 758; affected 912

CWE

CWE-862

References

https://me.sap.com/notes/3496410
https://url.sap/sapsecuritypatchday

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.