CVE-2024-42376CWE-862

Multiple Missing Authorization Check vulnerabilities in SAP Shared Service Framework

Medium · published August 13, 2024

CVSS v3.1
6.5
EPSS
0%
Percentile
23.9
In the wild
Unconfirmed
What it is

SAP Shared Service Framework does not perform necessary

authorization check for an authenticated user, resulting in escalation of

privileges. On successful exploitation, an attacker can cause a high impact on

confidentiality of the application.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00321 · 23.9th percentile
Weakness
CWE-862 · Missing Authorization
Published
2024-08-13T03:39Z
EPSS history
Timeline
  • 13 AUG 03:39Z
    Multiple Missing Authorization Check vulnerabilities in SAP Shared Service Framework
    cvelistv5