CVE-2024-32730

CVSS V2 None CVSS V3 None

Description

SAP Enable Now Manager does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. On successful exploitation, the attacker with the role 'Learner' could gain access to other user's data in manager which will lead to a high impact to the confidentiality of the application.

Overview

CVE ID
CVE-2024-32730

Assigner
sap

Vulnerability Status
PUBLISHED

Published Version
2024-04-26T16:06:39.373Z

Last Modified Date
2024-06-04T17:51:30.558Z

Weakness Enumerations

CWE	URL
CWE-862	http://cwe.mitre.org/data/definitions/862.html

References

Reference URL	Reference Tags
https://me.sap.com/notes/3441944
https://support.sap.com/en/my-support/knowledge-base/security-notes-news.html?anchorId=section_370125364

Sources

Source Name	Source URL
NIST	https://nvd.nist.gov/vuln/detail/CVE-2024-32730
MITRE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-32730

History

Created	Old Value	New Value	Data Type	Notes
2024-06-26 08:16:25				Added to TrackCVE