CVE-2024-32730CWE-862

Missing authorization check in SAP Enable Now Manager

Medium · published April 26, 2024

CVSS v3.1
6.5
EPSS
1%
Percentile
45.4
In the wild
Unconfirmed
What it is

SAP Enable Now Manager does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. On successful exploitation, the attacker with the role 'Learner' could gain access to other user's data in manager which will lead to a high impact to the confidentiality of the application.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00552 · 45.4th percentile
Weakness
CWE-862 · Missing Authorization
Published
2024-04-26T16:06Z
EPSS history
Timeline
  • 26 APR 16:06Z
    Missing authorization check in SAP Enable Now Manager
    cvelistv5