CVE-2024-39592CWE-862
[CVE-2024-39592] Missing Authorization check in SAP PDCE
High · published July 9, 2024
What it is
Elements of PDCE does not perform necessary
authorization checks for an authenticated user, resulting in escalation of
privileges.
This
allows an attacker to read sensitive information causing high impact on the
confidentiality of the application.
The record
Technical detail
- CVSS v3.1
- 7.7 · HIGH
- Vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
- CVSS v4.0
- Not supplied
- EPSS
- 0.00420 · 35.2th percentile
- Weakness
- CWE-862 · Missing Authorization
- Published
- 2024-07-09T03:45Z
EPSS history
Timeline