CVE-2024-39592: [CVE-2024-39592] Missing Authorization check in SAP PDCE
First published: Tue Jul 09 2024(Updated: )
Elements of PDCE does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. This allows an attacker to read sensitive information causing high impact on the confidentiality of the application.
Credit: cna@sap.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Sap S4core | =102 | |
| Sap S4core | =103 | |
| Sap S4coreop | =104 | |
| Sap S4coreop | =105 | |
| Sap S4coreop | =106 | |
| Sap S4coreop | =107 | |
| Sap S4coreop | =108 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
- agent/weakness
- agent/title
- agent/references
- agent/first-publish-date
- agent/type
- agent/description
- agent/author
- agent/event
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/severity
- agent/softwarecombine
- agent/tags
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/sap
- canonical/sap s4core
- version/sap s4core/102
- version/sap s4core/103
- canonical/sap s4coreop
- version/sap s4coreop/104
- version/sap s4coreop/105
- version/sap s4coreop/106
- version/sap s4coreop/107
- version/sap s4coreop/108