CVE-2024-42373CWE-862

Missing Authorization Check in SAP Student Life Cycle Management (SLcM)

Medium · published August 13, 2024

CVSS v3.1
4.3
EPSS
0%
Percentile
15.5
In the wild
Unconfirmed
What it is

SAP Student Life Cycle Management (SLcM) fails to conduct proper authorization checks for authenticated users, leading to the potential escalation of privileges. On successful exploitation it could allow an attacker to delete non-sensitive report variants that are typically restricted, causing minimal impact on the integrity of the application.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00250 · 15.5th percentile
Weakness
CWE-862 · Missing Authorization
Published
2024-08-13T04:53Z
EPSS history
Timeline
  • 13 AUG 04:53Z
    Missing Authorization Check in SAP Student Life Cycle Management (SLcM)
    cvelistv5