CVE-2024-34690CWE-862

Missing Authorization check in SAP Student Life Cycle Management (SLcM)

Medium · published June 11, 2024

CVSS v3.1
5.4
EPSS
0%
Percentile
12.2
In the wild
Unconfirmed
What it is

SAP Student Life Cycle

Management (SLcM) fails to conduct proper authorization checks for

authenticated users, leading to the potential escalation of privileges. On

successful exploitation it could allow an attacker to access and edit

non-sensitive report variants that are typically restricted, causing minimal

impact on the confidentiality and integrity of the application.

The record
Technical detail
CVSS v3.1
5.4 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00223 · 12.2th percentile
Weakness
CWE-862 · Missing Authorization
Published
2024-06-11T02:17Z
EPSS history
Timeline
  • 11 JUN 02:17Z
    Missing Authorization check in SAP Student Life Cycle Management (SLcM)
    cvelistv5