CVE-2024-4138CWE-862

Missing Authorization Checks in SAP S/4 HANA (Manage Bank Statement Reprocessing Rules)

Medium · published May 14, 2024

CVSS v3.1
4.3
EPSS
0%
Percentile
20.0
In the wild
Unconfirmed
What it is

Manage Bank Statement ReProcessing Rules does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. By exploiting this vulnerability, an attacker can enable/disable the sharing rule of other users affecting the integrity of the application. Confidentiality and Availability are not affected.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00286 · 20.0th percentile
Weakness
CWE-862 · Missing Authorization
Published
2024-05-14T03:53Z
EPSS history
Timeline
  • 14 MAY 03:53Z
    Missing Authorization Checks in SAP S/4 HANA (Manage Bank Statement Reprocessing Rules)
    cvelistv5