CVE-2024-30216CWE-862

Missing Authorization check in SAP S/4 HANA (Cash Management)

Medium · published April 9, 2024

CVSS v3.1
4.3
EPSS
0%
Percentile
23.5
In the wild
Unconfirmed
What it is

Cash Management in SAP S/4 HANA does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. By exploiting this vulnerability, attacker can add notes in the review request with 'completed' status affecting the integrity of the application. Confidentiality and Availability are not impacted.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00318 · 23.5th percentile
Weakness
CWE-862 · Missing Authorization
Published
2024-04-09T01:02Z
EPSS history
Timeline
  • 09 APR 01:02Z
    Missing Authorization check in SAP S/4 HANA (Cash Management)
    cvelistv5