CVE-2024-39591

SAP Document Builder does not perform necessary authorization checks for one of the function modules resulting in escalation of privileges causing low impact on confidentiality of the application.

Score

CVSS 3.1 5.3 Medium

Status

Analyzed - cna@sap.com

Published

2024-08-13

Last modified

2024-08-13

Weaknesses

CWE-862

Affected products

• Document Builder (Sap)
• Sap Document Builder (Sap Se)

References

• https://me.sap.com/notes/3477423
• https://url.sap/sapsecuritypatchday