CVE-2024-44113 — Information Disclosure vulnerability in the SAP Business Warehouse (BEx Analyzer)

Description (CNA)

Due to missing authorization checks, SAP Business Warehouse (BEx Analyzer) allows an authenticated attacker to access information over the network which is otherwise restricted. On successful exploitation the attacker can enumerate information causing a limited impact on confidentiality of the application.

Affected (CNA)

Vendor / product	Versions
SAP_SE / SAP Business Warehouse (BEx Analyzer)	affected DW4CORE 200; affected DW4CORE 300; affected DW4CORE 400; affected SAP_BW 700; affected SAP_BW 701; affected SAP_BW 702; affected SAP_BW 731; affected SAP_BW 740; affected SAP_BW 750; affected SAP_BW 751; affected SAP_BW 752; affected SAP_BW 753; affected SAP_BW 754; affected SAP_BW 755; affected SAP_BW 756; affected SAP_BW 757; affected SAP_BW 758

CWE

CWE-359, CWE-862

References

https://me.sap.com/notes/3481992
https://url.sap/sapsecuritypatchday

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.