CVE-2024-41728CWE-862

Missing Authorization check in SAP NetWeaver Application Server for ABAP and ABAP Platform

Low · published September 10, 2024

CVSS v3.1
2.7
EPSS
0%
Percentile
20.2
In the wild
Unconfirmed
What it is

Due to missing authorization check, SAP NetWeaver Application Server for ABAP and ABAP Platform allows an attacker logged in as a developer to read objects contained in a package. This causes an impact on confidentiality, as this attacker would otherwise not have access to view these objects.

The record
Technical detail
CVSS v3.1
2.7 · LOW
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00288 · 20.2th percentile
Weakness
CWE-862 · Missing Authorization
Published
2024-09-10T04:00Z
EPSS history
Timeline
  • 10 SEP 04:00Z
    Missing Authorization check in SAP NetWeaver Application Server for ABAP and ABAP Platform
    cvelistv5