Awaiting Analysis
CVE has been recently published to the CVE List and has been received by the NVD.

Products

SAP

Source

cna@sap.com

CVE-2024-45284 details

Published : Sept. 10, 2024, 5:15 a.m.
Last Modified : Sept. 10, 2024, 12:09 p.m.

Description

An authenticated attacker with high privilege can use functions of SLCM transactions to which access should be restricted. This may result in an escalation of privileges causing low impact on integrity of the application.

CVSS Score

1	2.4	3	4	5	6	7	8	9	10

Weakness

Weakness	Name	Description
CWE-862	Missing Authorization	The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

CVSS Data

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact