CVE-2024-39596

Due to missing authorization checks, SAP Enable Now allows an author to escalate privileges to access information which should otherwise be restricted. On successful exploitation, the attacker can cause limited impact on confidentiality of the application.

Score

CVSS 3.1 4.3 Medium

Status

Deferred - cna@sap.com

Published

2024-07-09

Last modified

2024-08-02

Weaknesses

CWE-862

Affected products

• Sap Enable Now (Sap Se)

References

• https://me.sap.com/notes/3476348
• https://url.sap/sapsecuritypatchday