CVE-2024-41736CWE-200

Information Disclosure vulnerability in SAP Permit to Work

Medium · published August 13, 2024

CVSS v3.1
4.3
EPSS
0%
Percentile
21.4
In the wild
Unconfirmed
What it is

Under certain conditions SAP Permit to Work

allows an authenticated attacker to access information which would otherwise be

restricted causing low impact on the confidentiality of the application.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00299 · 21.4th percentile
Weakness
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
Published
2024-08-13T04:09Z
EPSS history
Timeline
  • 13 AUG 04:09Z
    Information Disclosure vulnerability in SAP Permit to Work
    cvelistv5