CVE-2024-37176mediumCWE-862

CVE-2024-37176: fallo de gravedad media en SAP_SE SAP BW/4HANA Transformation and Data…

Missing Authorization check in SAP BW/4HANA Transformation and DTP

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear SAP BW/4HANA Transformation and Data Transfer Process

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

13Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 5.5epss 0.3%
SAP BW/4HANA Transformation and Data Transfer Process (DTP) allows an authenticated attacker to gain higher access levels than they should have by exploiting improper authorization checks. This results in escalation of privileges. It has no impact on the confidentiality of data but may have low impacts on the integrity and availability of the application.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:L
Productos afectados
SAP_SE · SAP BW/4HANA Transformation and Data Transfer Process