CVE-2024-44112 — Missing Authorization check in SAP for Oil & Gas (Transportation and Distribution)

CVE-2024-44112

Missing Authorization check in SAP for Oil & Gas (Transportation and Distribution) PUBLISHED

Description (CNA)

Due to missing authorization check in SAP for Oil & Gas (Transportation and Distribution), an attacker authenticated as a non-administrative user could call a remote-enabled function which will allow them to delete non-sensitive entries in a user data table. There is no effect on confidentiality or availability.

Affected (CNA)

Vendor / product	Versions
SAP_SE / SAP for Oil & Gas	affected 600; affected 602; affected 603; affected 604; affected 605; affected 606; affected 617; affected 618; affected 800; affected 802; affected 803; affected 804; affected 805; affected 806; affected 807

CWE

CWE-862

References

https://me.sap.com/notes/3505293
https://url.sap/sapsecuritypatchday

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.