CVE-2024-34690
Missing Authorization check in SAP Student Life Cycle Management (SLcM)
Vexday Risk Score
13Bajo
Decisión SSVC (CISA)
Track
Sin señal de explotación → monitorear
CVSS 5.4EPSS 0.2%KEV nãoPoC —Nuclei —Metasploit —Patch —
Ciclo de vida
11 jun 2024Publicada en NVD
Recomendación: Monitorear — sin señal de explotación por ahora.
SAP Student Life Cycle
Management (SLcM) fails to conduct proper authorization checks for
authenticated users, leading to the potential escalation of privileges. On
successful exploitation it could allow an attacker to access and edit
non-sensitive report variants that are typically restricted, causing minimal
impact on the confidentiality and integrity of the application.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
Productos afectados
SAP_SE · SAP Student Life Cycle Management¿Quieres saber si tu infraestructura está expuesta a esto?
Hablar con TrueHacking →