CVEvulnerability
CVE-2024-24739
6.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2024-02-13
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
- CVSS 3.1 ([email protected])
- 6.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
- Weaknesses
- CWE-862
Description
SAP Bank Account Management (BAM) allows an authenticated user with restricted access to use functions which can result in escalation of privileges with low impact on confidentiality, integrity and availability of the application.
Affected configurations
• sap bank account management s4core 100
• sap bank account management s4core 101
• sap bank account management sap fin 618
• sap bank account management sap fin 730
Related
Weakness · CWE (1)
- CWE-862 Missing Authorization weakness
References
- https://me.sap.com/notes/2637727 Permissions Required
- https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html Vendor Advisory
- https://me.sap.com/notes/2637727 Permissions Required
- https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html Vendor Advisory