CVE-2024-42376 — Multiple Missing Authorization Check vulnerabilities in SAP Shared Service Framework

CVE-2024-42376

Multiple Missing Authorization Check vulnerabilities in SAP Shared Service Framework PUBLISHED

Description (CNA)

SAP Shared Service Framework does not perform necessary authorization check for an authenticated user, resulting in escalation of privileges. On successful exploitation, an attacker can cause a high impact on confidentiality of the application.

Affected (CNA)

Vendor / product	Versions
SAP_SE / SAP Shared Service Framework	affected SAP_BS_FND 702; affected 731; affected 746; affected 747; affected 748

CWE

CWE-862

References

https://me.sap.com/notes/3474590
https://url.sap/sapsecuritypatchday

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.