CVE-2024-42377 — Multiple Missing Authorization Check vulnerabilities in SAP Shared Service Framework

CVE-2024-42377

Multiple Missing Authorization Check vulnerabilities in SAP Shared Service Framework PUBLISHED

Description (CNA)

SAP shared service framework allows an authenticated non-administrative user to call a remote-enabled function, which will allow them to insert value entries into a non-sensitive table, causing low impact on integrity of the application

Affected (CNA)

Vendor / product	Versions
SAP_SE / SAP Shared Service Framework	affected SAP_BS_FND 702; affected 731; affected 746; affected 747; affected 748

CWE

CWE-862

References

https://me.sap.com/notes/3474590
https://url.sap/sapsecuritypatchday

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.