CVE-2024-42372 — Missing Authorization check in SAP NetWeaver AS Java (System Landscape Directory)

CVE-2024-42372

Missing Authorization check in SAP NetWeaver AS Java (System Landscape Directory) PUBLISHED

Description (CNA)

Due to missing authorization check in SAP NetWeaver AS Java (System Landscape Directory) an unauthorized user can read and modify some restricted global SLD configurations causing low impact on confidentiality and integrity of the application.

Affected (CNA)

Vendor / product	Versions
SAP_SE / SAP NetWeaver AS Java (System Landscape Directory)	affected LM-SLD 7.5

CWE

CWE-862

References

https://me.sap.com/notes/3335394
https://url.sap/sapsecuritypatchday

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.