CVE-2024-42376CWE-862
Multiple Missing Authorization Check vulnerabilities in SAP Shared Service Framework
Medium · published August 13, 2024
What it is
SAP Shared Service Framework does not perform necessary
authorization check for an authenticated user, resulting in escalation of
privileges. On successful exploitation, an attacker can cause a high impact on
confidentiality of the application.
The record
Technical detail
- CVSS v3.1
- 6.5 · MEDIUM
- Vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
- CVSS v4.0
- Not supplied
- EPSS
- 0.00321 · 23.9th percentile
- Weakness
- CWE-862 · Missing Authorization
- Published
- 2024-08-13T03:39Z
EPSS history
Timeline