CVE-2024-22133CWE-863

Improper Access Control in SAP Fiori Front End Server

Medium · published March 12, 2024

CVSS v3.1
4.6
EPSS
0%
Percentile
21.6
In the wild
Unconfirmed
What it is

SAP Fiori Front End Server - version 605, allows altering of approver details on the read-only field when sending leave request information. This could lead to creation of request with incorrect approver causing low impact on Confidentiality and Integrity with no impact on Availability of the application.

The record
Technical detail
CVSS v3.1
4.6 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00300 · 21.6th percentile
Weakness
CWE-863 · Incorrect Authorization
Published
2024-03-12T00:32Z
EPSS history
Timeline
  • 12 MAR 00:32Z
    Improper Access Control in SAP Fiori Front End Server
    cvelistv5