CVE-2024-42373 — Missing Authorization Check in SAP Student Life Cycle Management (SLcM)

CVE-2024-42373

Missing Authorization Check in SAP Student Life Cycle Management (SLcM) PUBLISHED

Description (CNA)

SAP Student Life Cycle Management (SLcM) fails to conduct proper authorization checks for authenticated users, leading to the potential escalation of privileges. On successful exploitation it could allow an attacker to delete non-sensitive report variants that are typically restricted, causing minimal impact on the integrity of the application.

Affected (CNA)

Vendor / product	Versions
SAP_SE / SAP Student Life Cycle Management (SLcM)	affected 617; affected 618; affected 802; affected 803; affected 804; affected 805; affected 806; affected 807; affected 808

CWE

CWE-862

References

https://me.sap.com/notes/3479293
https://url.sap/sapsecuritypatchday

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.