CVE-2024-34690
Missing Authorization check in SAP Student Life Cycle Management (SLcM)
Vexday Risk Score
13Baixo
Decisão SSVC (CISA)
Track
Sem sinal de exploração → monitorar
CVSS 5.4EPSS 0.2%KEV nãoPoC —Nuclei —Metasploit —Patch —
Ciclo de vida
11 jun 2024Publicada no NVD
Recomendação: Monitorar — sem sinal de exploração no momento.
SAP Student Life Cycle
Management (SLcM) fails to conduct proper authorization checks for
authenticated users, leading to the potential escalation of privileges. On
successful exploitation it could allow an attacker to access and edit
non-sensitive report variants that are typically restricted, causing minimal
impact on the confidentiality and integrity of the application.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
Produtos afetados
SAP_SE · SAP Student Life Cycle ManagementQuer saber se a sua infraestrutura está exposta a isto?
Falar com a TrueHacking →