CVE-2024-39596 | THREATINT

Description

Due to missing authorization checks, SAP Enable Now allows an author to escalate privileges to access information which should otherwise be restricted. On successful exploitation, the attacker can cause limited impact on confidentiality of the application.

Reserved 2024-06-26 | Published 2024-07-09 | Updated 2024-08-02 | Assigner sap

MEDIUM: 4.3CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Problem types

CWE-862: Missing Authorization

Product status

Default status

unaffected

WPB_MANAGER_CE 10

affected

WPB_MANAGER_HANA 10

affected

ENABLE_NOW_CONSUMP_DEL 1704

affected

References

url.sap/sapsecuritypatchday

me.sap.com/notes/3476348

cve.org (CVE-2024-39596)

nvd.nist.gov (CVE-2024-39596)

Download JSON