CVE-2024-37175

SAP CRM WebClient does not perform necessary authorization check for an authenticated user, resulting in escalation of privileges. This could allow an attacker to access some sensitive information.

Score

CVSS 3.1 6.5 Medium

Status

Modified - cna@sap.com

Published

2024-07-09

Last modified

2024-08-02

Weaknesses

CWE-862

Affected products

• Customer Relationship Management S4fnd (Sap)
• Customer Relationship Management Webclient Ui (Sap)
• Sap Crm Webclient Ui (Sap Se)

References

• https://me.sap.com/notes/3467377
• https://url.sap/sapsecuritypatchday