CVE-2024-21735: Improper Authorization check in SAP LT Replication Server

Published Jan 9, 2024

Updated

SAP LT Replication Server - version S4CORE 103, S4CORE 104, S4CORE 105, S4CORE 106, S4CORE 107, S4CORE 108, does not perform necessary authorization checks. This could allow an attacker with high privileges to perform unintended actions, resulting in escalation of privileges, which has High impact on confidentiality, integrity and availability of the system.

Affected Software

6 affected components

SAP LT Replication Server=s4core_103

SAP LT Replication Server=s4core_104

SAP LT Replication Server=s4core_105

SAP LT Replication Server=s4core_106

SAP LT Replication Server=s4core_107

SAP LT Replication Server=s4core_108

Event History

Jan 9, 2024

CVE Published

via MITRE·12:57 AM

Data Sourced

via MITRE·12:57 AM

DescriptionSeverity

Data Sourced

via NVD·01:15 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2024-21735?

CVE-2024-21735 has a high severity rating due to the potential for privilege escalation through unauthorized actions.

How do I fix CVE-2024-21735?

To mitigate CVE-2024-21735, apply the latest patches released by SAP for the affected versions of the SAP LT Replication Server.

What versions are affected by CVE-2024-21735?

CVE-2024-21735 affects SAP LT Replication Server versions S4CORE 103 to S4CORE 108.

What kind of vulnerabilities does CVE-2024-21735 exploit?

CVE-2024-21735 exploits inadequate authorization checks allowing unauthorized actions by high privilege attackers.

Who is impacted by CVE-2024-21735?

Organizations using the affected versions of SAP LT Replication Server are at risk from CVE-2024-21735.