Skip to content
OpenAdvisories
Medium · 6.5 CVE-2024-42376 EUVD-2024-39581GHSA-rw5c-82rr-mprm

Multiple Missing Authorization Check vulnerabilities in SAP Shared Service Framework

Published Aug 13, 2024 · Updated Aug 13, 2024 · Assigned by sap

Description

SAP Shared Service Framework does not perform necessary
authorization check for an authenticated user, resulting in escalation of
privileges. On successful exploitation, an attacker can cause a high impact on
confidentiality of the application.

Affected products

VendorProductAffectedFixed
SAP_SE SAP Shared Service Framework SAP_BS_FND 702, 731, 746, 747, 748 —

Advisories 2

References