Skip to content
OpenAdvisories
Low · 2.4 CVE-2024-45284 EUVD-2024-41416GHSA-q44j-mpqx-mx83

Missing authorization check in SAP Student Life Cycle Management (SLcM)

Published Sep 10, 2024 · Updated Sep 10, 2024 · Assigned by sap

Description

An authenticated attacker with high privilege can use functions of SLCM transactions to which access should be restricted. This may result in an escalation of privileges causing low impact on integrity of the application.

Affected products

VendorProductAffectedFixed
SAP_SE SAP Student Life Cycle Management (SLcM) 617, 618, 800, 802, 803, 804, 805, 806, 807, 808 —

Advisories 2

References