CVE-2024-33000CWE-862
Missing Authorization check in SAP Bank Account Management
Low · published May 14, 2024
What it is
SAP Bank Account Management does not perform necessary authorization check for an authorized user, resulting in escalation of privileges. As a result, it has a low impact to confidentiality to the system.
The record
Technical detail
- CVSS v3.1
- 3.5 · LOW
- Vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N
- CVSS v4.0
- Not supplied
- EPSS
- 0.00331 · 25.0th percentile
- Weakness
- CWE-862 · Missing Authorization
- Published
- 2024-05-14T03:46Z
EPSS history
Timeline