CVE-2024-21736CWE-863

Missing Authorization check in SAP S/4HANA Finance (Advanced Payment Management)

Medium · published January 9, 2024

CVSS v3.1
6.4
EPSS
0%
Percentile
18.8
In the wild
Unconfirmed
What it is

SAP S/4HANA Finance for (Advanced Payment Management) - versions SAPSCORE 128, S4CORE 107, does not perform necessary authorization checks. A function import could be triggered allowing the attacker to create in-house bank accounts leading to low impact on the confidentiality of the application.

The record
Technical detail
CVSS v3.1
6.4 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00274 · 18.8th percentile
Weakness
CWE-863 · Incorrect Authorization
Published
2024-01-09T01:15Z
EPSS history
Timeline
  • 09 JAN 01:15Z
    Missing Authorization check in SAP S/4HANA Finance (Advanced Payment Management)
    cvelistv5