CVE-2024-45284CWE-862

Missing authorization check in SAP Student Life Cycle Management (SLcM)

Low · published September 10, 2024

CVSS v3.1
2.4
EPSS
0%
Percentile
16.3
In the wild
Unconfirmed
What it is

An authenticated attacker with high privilege can use functions of SLCM transactions to which access should be restricted. This may result in an escalation of privileges causing low impact on integrity of the application.

The record
Technical detail
CVSS v3.1
2.4 · LOW
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00256 · 16.3th percentile
Weakness
CWE-862 · Missing Authorization
Published
2024-09-10T04:57Z
EPSS history
Timeline
  • 10 SEP 04:57Z
    Missing authorization check in SAP Student Life Cycle Management (SLcM)
    cvelistv5