CVE-2024-44121 — Information Disclosure in SAP S/4 HANA (Statutory Reports)

CVE-2024-44121

Information Disclosure in SAP S/4 HANA (Statutory Reports) PUBLISHED

Description (CNA)

Under certain conditions Statutory Reports in SAP S/4 HANA allows an attacker with basic privileges to access information which would otherwise be restricted. The vulnerability could expose internal user data that should remain confidential. It does not impact the integrity and availability of the application

Affected (CNA)

Vendor / product	Versions
SAP_SE / SAP S/4 HANA (Statutory Reports)	affected 900

CWE

CWE-213

References

https://me.sap.com/notes/3437585
https://url.sap/sapsecuritypatchday

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.