CVEvulnerability

CVE-2024-39591

5.3 MEDIUM Published 2024-08-13 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2024-08-13
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
4.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS 3.1 ([email protected])
5.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Weaknesses
CWE-862

Description

SAP Document Builder does not perform necessary authorization checks for one of the function modules resulting in escalation of privileges causing low impact on confidentiality of the application.

Affected configurations

• sap document builder s4fnd 102 • sap document builder s4fnd 103 • sap document builder s4fnd 104 • sap document builder s4fnd 105 • sap document builder s4fnd 106 • sap document builder s4fnd 107 • sap document builder s4fnd 108 • sap document builder sap bs fnd 702 • sap document builder sap bs fnd 731 • sap document builder sap bs fnd 746 • sap document builder sap bs fnd 747 • sap document builder sap bs fnd 748

Related

Weakness · CWE (1)

  • CWE-862 Missing Authorization weakness

References