CVE-2024-39596 | THREATINT

Description

Due to missing authorization checks, SAP Enable Now allows an author to escalate privileges to access information which should otherwise be restricted. On successful exploitation, the attacker can cause limited impact on confidentiality of the application.

PUBLISHED Reserved 2024-06-26 | Published 2024-07-09 | Updated 2024-08-02 | Assigner sap

MEDIUM: 4.3CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N