CVE-2024-24739
Missing authorization check in SAP BAM (Bank Account Management)
Vexday Risk Score
13Bajo
Decisión SSVC (CISA)
Track
Sin señal de explotación → monitorear
CVSS 6.3EPSS 0.3%KEV nãoPoC —Nuclei —Metasploit —Patch —
Ciclo de vida
13 feb 2024Publicada en NVD
Recomendación: Monitorear — sin señal de explotación por ahora.
SAP Bank Account Management (BAM) allows an authenticated user with restricted access to use functions which can result in escalation of privileges with low impact on confidentiality, integrity and availability of the application.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Productos afectados
SAP_SE · SAP BAM (Bank Account Management)¿Quieres saber si tu infraestructura está expuesta a esto?
Hablar con TrueHacking →