CVE-2024-42372: Missing Authorization check in SAP NetWeaver AS Java (System Landscape Directory)
Published Nov 12, 2024
·Updated
Due to missing authorization check in SAP NetWeaver AS Java (System Landscape Directory) an unauthorized user can read and modify some restricted global SLD configurations causing low impact on confidentiality and integrity of the application.
Affected Software
1 affected component
SAP NetWeaver AS Java
Event History
Nov 12, 2024
CVE Published
via MITRE·12:25 AM
Data Sourced
via MITRE·12:25 AM
DescriptionSeverity
Data Sourced
via NVD·01:15 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-42372?
The severity of CVE-2024-42372 is classified as low, impacting confidentiality and integrity.
2
How do I fix CVE-2024-42372?
To fix CVE-2024-42372, implement proper authorization checks in the SAP NetWeaver AS Java System Landscape Directory.
3
What type of configurations can be accessed in CVE-2024-42372?
CVE-2024-42372 allows unauthorized users to read and modify restricted global SLD configurations.
4
Which software is affected by CVE-2024-42372?
CVE-2024-42372 affects SAP NetWeaver AS Java.
5
What impact does CVE-2024-42372 have on applications?
CVE-2024-42372 can cause low impact on the confidentiality and integrity of the affected application.