CVE-2024-39592
[CVE-2024-39592] Missing Authorization check in SAP PDCE
Vexday Risk Score
21Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 7.7EPSS 0.4%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
09 Jul 2024Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
Elements of PDCE does not perform necessary
authorization checks for an authenticated user, resulting in escalation of
privileges.
This
allows an attacker to read sensitive information causing high impact on the
confidentiality of the application.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
Affected products
SAP_SE · SAP PDCEWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →