CVE-2024-21735: Improper Authorization check in SAP LT Replication Server
First published: Tue Jan 09 2024(Updated: )
SAP LT Replication Server - version S4CORE 103, S4CORE 104, S4CORE 105, S4CORE 106, S4CORE 107, S4CORE 108, does not perform necessary authorization checks. This could allow an attacker with high privileges to perform unintended actions, resulting in escalation of privileges, which has High impact on confidentiality, integrity and availability of the system.
Credit: cna@sap.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| SAP LT Replication Server | =s4core_103 | |
| SAP LT Replication Server | =s4core_104 | |
| SAP LT Replication Server | =s4core_105 | |
| SAP LT Replication Server | =s4core_106 | |
| SAP LT Replication Server | =s4core_107 | |
| SAP LT Replication Server | =s4core_108 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2024-21735?
CVE-2024-21735 has a high severity rating due to the potential for privilege escalation through unauthorized actions.
How do I fix CVE-2024-21735?
To mitigate CVE-2024-21735, apply the latest patches released by SAP for the affected versions of the SAP LT Replication Server.
What versions are affected by CVE-2024-21735?
CVE-2024-21735 affects SAP LT Replication Server versions S4CORE 103 to S4CORE 108.
What kind of vulnerabilities does CVE-2024-21735 exploit?
CVE-2024-21735 exploits inadequate authorization checks allowing unauthorized actions by high privilege attackers.
Who is impacted by CVE-2024-21735?
Organizations using the affected versions of SAP LT Replication Server are at risk from CVE-2024-21735.
- agent/references
- agent/type
- agent/first-publish-date
- agent/author
- agent/severity
- agent/title
- agent/event
- agent/softwarecombine
- agent/description
- collector/mitre-cve
- source/MITRE
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/last-modified-date
- agent/weakness
- agent/tags
- collector/epss-latest
- source/FIRST
- agent/epss
- agent/source
- vendor/sap
- canonical/sap lt replication server
- version/sap lt replication server/s4core_103
- version/sap lt replication server/s4core_104
- version/sap lt replication server/s4core_105
- version/sap lt replication server/s4core_106
- version/sap lt replication server/s4core_107
- version/sap lt replication server/s4core_108