CVE-2024-39592

Elements of PDCE does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. This allows an attacker to read sensitive information causing high impact on the confidentiality of the application.

Score

CVSS 3.1 7.7 High

Status

Modified - cna@sap.com

Published

2024-07-09

Last modified

2024-08-02

Weaknesses

CWE-862

Affected products

• S4core (Sap)
• S4coreop (Sap)
• Sap Pdce (Sap Se)

References

• https://me.sap.com/notes/3483344
• https://url.sap/sapsecuritypatchday