CVE-2024-45286 — Missing Authorization check in SAP Production and Revenue Accounting (Tobin interface)

Description (CNA)

Due to lack of proper authorization checks when calling user, a function module in obsolete Tobin interface in SAP Production and Revenue Accounting allows unauthorized access that could lead to disclosure of highly sensitive data. There is no impact on integrity or availability.

Affected (CNA)

Vendor / product	Versions
SAP_SE / SAP Production and Revenue Accounting (Tobin interface)	affected S4CEXT 106; affected S4CEXT 107; affected S4CEXT 108; affected IS-PRA 605; affected IS-PRA 606; affected IS-PRA 616; affected IS-PRA 617; affected IS-PRA 618; affected IS-PRA 800; affected IS-PRA 801; affected IS-PRA 802; affected IS-PRA 803; affected IS-PRA 804; affected IS-PRA 805

CWE

CWE-862

References

https://me.sap.com/notes/3488341
https://url.sap/sapsecuritypatchday

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.