CVE-2024-39592: [CVE-2024-39592] Missing Authorization check in SAP PDCE
First published: Tue Jul 09 2024(Updated: )
Elements of PDCE does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. This allows an attacker to read sensitive information causing high impact on the confidentiality of the application.
Credit: cna@sap.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| SAP S/4HANA (SAP S4fnd, SAP S4core) | =102 | |
| SAP S/4HANA (SAP S4fnd, SAP S4core) | =103 | |
| SAP S/4HANA | =104 | |
| SAP S/4HANA | =105 | |
| SAP S/4HANA | =106 | |
| SAP S/4HANA | =107 | |
| SAP S/4HANA | =108 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the severity of CVE-2024-39592?
CVE-2024-39592 has a high severity rating due to its potential to allow unauthorized access to sensitive information.
How do I fix CVE-2024-39592?
To mitigate CVE-2024-39592, apply the latest security patches provided by SAP for the affected versions.
What applications are affected by CVE-2024-39592?
CVE-2024-39592 affects SAP S4Core versions 102 and 103, as well as SAP S4CoreOP versions 104 through 108.
Can CVE-2024-39592 be exploited remotely?
Yes, CVE-2024-39592 can be exploited by authenticated users, allowing them to escalate privileges and access sensitive data.
What impact does CVE-2024-39592 have on confidentiality?
CVE-2024-39592 significantly impacts confidentiality by enabling attackers to read sensitive information without proper authorization.
- agent/weakness
- agent/title
- agent/references
- agent/first-publish-date
- agent/type
- agent/description
- agent/author
- agent/event
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/severity
- agent/softwarecombine
- agent/source
- agent/tags
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/sap
- canonical/sap s/4hana (sap s4fnd, sap s4core)
- version/sap s/4hana (sap s4fnd, sap s4core)/102
- version/sap s/4hana (sap s4fnd, sap s4core)/103
- canonical/sap s/4hana
- version/sap s/4hana/104
- version/sap s/4hana/105
- version/sap s/4hana/106
- version/sap s/4hana/107
- version/sap s/4hana/108