CVE-2024-37176

Missing Authorization check in SAP BW/4HANA Transformation and DTP

CVSS 5.5 MEDIUMEPSS 0.3%CWE-862

Vexday Risk Score

13Baixo

Decisão SSVC (CISA)

Track

Sem sinal de exploração → monitorar

CVSS 5.5EPSS 0.3%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

11 jun 2024Publicada no NVD

Recomendação: Monitorar — sem sinal de exploração no momento.

SAP BW/4HANA Transformation and Data Transfer Process (DTP) allows an authenticated attacker to gain higher access levels than they should have by exploiting improper authorization checks. This results in escalation of privileges. It has no impact on the confidentiality of data but may have low impacts on the integrity and availability of the application.

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:L

Produtos afetados

SAP_SE · SAP BW/4HANA Transformation and Data Transfer Process

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://me.sap.com/notes/3465455 https://support.sap.com/en/my-support/knowledge-base/security-notes-news.html