CVE-2024-41734

Missing Authorization check in SAP NetWeaver Application Server ABAP and ABAP Platform

CVSS 4.3 MEDIUMEPSS 0.3%CWE-862

Vexday Risk Score

13Baixo

Decisão SSVC (CISA)

Track

Sem sinal de exploração → monitorar

CVSS 4.3EPSS 0.3%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

13 ago 2024Publicada no NVD

Recomendação: Monitorar — sem sinal de exploração no momento.

Due to missing authorization check in SAP NetWeaver Application Server ABAP and ABAP Platform, an authenticated attacker could call an underlying transaction, which leads to disclosure of user related information. There is no impact on integrity or availability.

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Produtos afetados

SAP_SE · SAP NetWeaver Application Server ABAP and ABAP Platform

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://me.sap.com/notes/3494349 https://url.sap/sapsecuritypatchday