Skip to content
OpenAdvisories
Medium · 4.3 CVE-2024-42373 EUVD-2024-39578GHSA-qq3q-q2pr-3vj8

Missing Authorization Check in SAP Student Life Cycle Management (SLcM)

Published Aug 13, 2024 · Updated Aug 14, 2024 · Assigned by sap

Description

SAP Student Life Cycle Management (SLcM) fails to conduct proper authorization checks for authenticated users, leading to the potential escalation of privileges. On successful exploitation it could allow an attacker to delete non-sensitive report variants that are typically restricted, causing minimal impact on the integrity of the application.

Affected products

VendorProductAffectedFixed
SAP_SE SAP Student Life Cycle Management (SLcM) 617, 618, 802, 803, 804, 805, 806, 807, 808 —

Advisories 3

References