CVE-2024-41728
Due to missing authorization check, SAP NetWeaver Application Server for ABAP and ABAP Platform allows an attacker logged in as a developer to read objects contained in a package. This causes an impact on confidentiality, as this attacker would otherwise not have access to view these objects.
- Score
- CVSS 3.1 2.7 Low
- Status
- Analyzed - cna@sap.com
- Published
- 2024-09-10
- Last modified
- 2024-09-10
- Weaknesses
- CWE-862
Affected products
- Netweaver Application Server Abap (Sap)
- Sap Netweaver Application Server For Abap And Abap Platform (Sap Se)
References
- https://me.sap.com/notes/3496410
- https://url.sap/sapsecuritypatchday
