CVEvulnerability

CVE-2024-41734

4.3 MEDIUM Published 2024-08-13 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2024-08-13
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
4.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS 3.1 ([email protected])
4.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Weaknesses
CWE-862

Description

Due to missing authorization check in SAP NetWeaver Application Server ABAP and ABAP Platform, an authenticated attacker could call an underlying transaction, which leads to disclosure of user related information. There is no impact on integrity or availability.

Affected configurations

• sap netweaver application server abap sap basis 700 • sap netweaver application server abap sap basis 701 • sap netweaver application server abap sap basis 702 • sap netweaver application server abap sap basis 731 • sap netweaver application server abap sap basis 740 • sap netweaver application server abap sap basis 750 • sap netweaver application server abap sap basis 751 • sap netweaver application server abap sap basis 752 • sap netweaver application server abap sap basis 753 • sap netweaver application server abap sap basis 754 • sap netweaver application server abap sap basis 755 • sap netweaver application server abap sap basis 756 • sap netweaver application server abap sap basis 757 • sap netweaver application server abap sap basis 758 • sap netweaver application server abap sap basis 912

Related

Weakness · CWE (1)

  • CWE-862 Missing Authorization weakness

References