Description
An authenticated attacker with high privilege can use functions of SLCM transactions to which access should be restricted. This may result in an escalation of privileges causing low impact on integrity of the application.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SAP_SE | SAP Student Life Cycle Management (SLcM) | 617, 618, 800, 802, 803, 804, 805, 806, 807, 808 | — |
Advisories 2
- NCSC-2024-0378 Kwetsbaarheden verholpen in SAP producten NCSC-NL (Netherlands) · Sep 19, 2024
- WID-SEC-2024-2086 SAP Patchday September 2024 BSI CERT-Bund (WID) · Sep 9, 2024