CVE-2024-39596CWE-862

[CVE-2024-39596] Missing Authorization check vulnerability in SAP Enable Now

Medium · published July 9, 2024

CVSS v3.1
4.3
EPSS
0%
Percentile
17.0
In the wild
Unconfirmed
What it is

Due to missing authorization checks, SAP Enable

Now allows an author to escalate privileges to access information which should

otherwise be restricted. On successful exploitation, the attacker can cause

limited impact on confidentiality of the application.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00262 · 17.0th percentile
Weakness
CWE-862 · Missing Authorization
Published
2024-07-09T04:25Z
EPSS history
Timeline
  • 09 JUL 04:25Z
    [CVE-2024-39596] Missing Authorization check vulnerability in SAP Enable Now
    cvelistv5