Description
SAP Shared Service Framework does not perform necessary
authorization check for an authenticated user, resulting in escalation of
privileges. On successful exploitation, an attacker can cause a high impact on
confidentiality of the application.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SAP_SE | SAP Shared Service Framework | SAP_BS_FND 702, 731, 746, 747, 748 | — |
Advisories 2
- NCSC-2024-0333 Kwetsbaarheden verholpen in SAP producten NCSC-NL (Netherlands) · Aug 13, 2024
- WID-SEC-2024-1818 SAP Security Patch Day – August 2024 BSI CERT-Bund (WID) · Aug 12, 2024