CVE-2024-42371: Multiple vulnerabilities in SAP NetWeaver Application Server for ABAP and ABAP Platform
The RFC enabled function module allows a low privileged user to delete the workplace favourites of any user. This vulnerability could be utilized to identify usernames and access information about targeted user's workplaces and nodes. There is low impact on integrity and availability of the application.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-42371?
CVE-2024-42371 has a low severity as it primarily affects user workplace configuration without significant impact on system integrity or availability.
How can I mitigate CVE-2024-42371?
Mitigation for CVE-2024-42371 involves applying security patches provided by SAP for the NetWeaver Application Server for ABAP.
Who is affected by CVE-2024-42371?
CVE-2024-42371 affects users of SAP NetWeaver Application Server for ABAP who have enabled the specific RFC function module.
What actions can be taken by an attacker exploiting CVE-2024-42371?
An attacker can exploit CVE-2024-42371 to delete workplace favourites of any user, potentially allowing for information gathering about targeted users.
Is there a fix available for CVE-2024-42371?
Yes, a fix is available and can be obtained through security updates from SAP that address the vulnerability in the affected software.