CVE-2024-42373: Missing Authorization Check in SAP Student Life Cycle Management (SLcM)
First published: Tue Aug 13 2024(Updated: )
SAP Student Life Cycle Management (SLcM) fails to conduct proper authorization checks for authenticated users, leading to the potential escalation of privileges. On successful exploitation it could allow an attacker to delete non-sensitive report variants that are typically restricted, causing minimal impact on the integrity of the application.
Credit: cna@sap.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| SAP Student Life Cycle Management | =617 | |
| SAP Student Life Cycle Management | =618 | |
| SAP Student Life Cycle Management | =802 | |
| SAP Student Life Cycle Management | =803 | |
| SAP Student Life Cycle Management | =804 | |
| SAP Student Life Cycle Management | =805 | |
| SAP Student Life Cycle Management | =806 | |
| SAP Student Life Cycle Management | =807 | |
| SAP Student Life Cycle Management | =808 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
- agent/weakness
- agent/title
- agent/type
- agent/description
- agent/references
- agent/first-publish-date
- agent/author
- agent/event
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/severity
- agent/softwarecombine
- agent/tags
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/sap
- canonical/sap student life cycle management
- version/sap student life cycle management/617
- version/sap student life cycle management/618
- version/sap student life cycle management/802
- version/sap student life cycle management/803
- version/sap student life cycle management/804
- version/sap student life cycle management/805
- version/sap student life cycle management/806
- version/sap student life cycle management/807
- version/sap student life cycle management/808