CVE-2024-30216

CVSS V2 None CVSS V3 None

Description

Cash Management in SAP S/4 HANA does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. By exploiting this vulnerability, attacker can add notes in the review request with 'completed' status affecting the integrity of the application. Confidentiality and Availability are not impacted.

Overview

CVE ID
CVE-2024-30216

Assigner
sap

Vulnerability Status
PUBLISHED

Published Version
2024-04-09T01:02:41.597Z

Last Modified Date
2024-06-04T17:38:58.000Z

Weakness Enumerations

CWE	URL
CWE-862	http://cwe.mitre.org/data/definitions/862.html

References

Reference URL	Reference Tags
https://me.sap.com/notes/3427178
https://support.sap.com/en/my-support/knowledge-base/security-notes-news.html?anchorId=section_370125364

Sources

Source Name	Source URL
NIST	https://nvd.nist.gov/vuln/detail/CVE-2024-30216
MITRE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-30216

History

Created	Old Value	New Value	Data Type	Notes
2024-06-26 11:52:28				Added to TrackCVE