CVE-2024-39592CWE-862

[CVE-2024-39592] Missing Authorization check in SAP PDCE

High · published July 9, 2024

CVSS v3.1
7.7
EPSS
0%
Percentile
35.2
In the wild
Unconfirmed
What it is

Elements of PDCE does not perform necessary

authorization checks for an authenticated user, resulting in escalation of

privileges.

This

allows an attacker to read sensitive information causing high impact on the

confidentiality of the application.

The record
Technical detail
CVSS v3.1
7.7 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00420 · 35.2th percentile
Weakness
CWE-862 · Missing Authorization
Published
2024-07-09T03:45Z
EPSS history
Timeline
  • 09 JUL 03:45Z
    [CVE-2024-39592] Missing Authorization check in SAP PDCE
    cvelistv5