Skip to content
OpenAdvisories
Medium · 4.3 CVE-2024-24741 EUVD-2024-22140GHSA-wq59-m22j-v4p5

Missing Authorization check in SAP Master Data Governance Material

Published Feb 13, 2024 · Updated Aug 1, 2024 · Assigned by sap

Description

SAP Master Data Governance for Material Data - versions 618, 619, 620, 621, 622, 800, 801, 802, 803, 804, does not perform necessary authorization check for an authenticated user, resulting in escalation of privileges. This could allow an attacker to read some sensitive information but no impact to integrity and availability.

Affected products

VendorProductAffectedFixed
SAP_SE SAP Master Data Governance Material 618, 619, 620, 621, 622, 800, 801, 802, 803, 804 —

Advisories 1

References