Skip to content
OpenAdvisories
Medium · 6.5 CVE-2024-42372 EUVD-2024-39577GHSA-c7xq-233c-6w92

Missing Authorization check in SAP NetWeaver AS Java (System Landscape Directory)

Published Nov 12, 2024 · Updated Nov 12, 2024 · Assigned by sap

Description

Due to missing authorization check in SAP NetWeaver AS Java (System Landscape Directory) an unauthorized user can read and modify some restricted global SLD configurations causing low impact on confidentiality and integrity of the application.

Affected products

VendorProductAffectedFixed
SAP_SE SAP NetWeaver AS Java (System Landscape Directory) LM-SLD 7.5 —

Advisories 1

References