CVE-2026-24311 — Insecure Storage Protection vulnerability in SAP Customer Checkout 2.0

CVE-2026-24311

Insecure Storage Protection vulnerability in SAP Customer Checkout 2.0 PUBLISHED

Description (CNA)

The SAP Customer Checkout application exhibits certain design characteristics that involve locally storing operational data using reversible protection mechanisms. Access to this data, combined with user?initiated interaction, may allow modifications to occur without validation. Such changes could affect system behaviour during startup, resulting in a high impact on the application's confidentiality and integrity, with a low impact on availability.

Affected (CNA)

Vendor / product	Versions
SAP_SE / SAP Customer Checkout 2.0	affected SAP_CUSTOMER_CHECKOUT 2.0

CWE

CWE-312

References

https://me.sap.com/notes/3708457
https://url.sap/sapsecuritypatchday

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.