SAP S/4 HANA Map Treasury Correspondence Format Data does not perform necessary authorization check for an authenticated user, resulting in escalation of privileges. This could allow an attacker to delete the data with a high impact to availability.
References
| Link | Resource |
|---|---|
| https://launchpad.support.sap.com/#/notes/2985905 | Permissions Required Vendor Advisory |
| https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
11 Apr 2023, 22:15
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | SAP S/4 HANA Map Treasury Correspondence Format Data does not perform necessary authorization check for an authenticated user, resulting in escalation of privileges. This could allow an attacker to delete the data with a high impact to availability. |
22 Feb 2023, 16:19
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:sap:s\/4hana:104:*:*:*:*:*:*:* cpe:2.3:a:sap:s\/4hana:105:*:*:*:*:*:*:* |
|
| References | (MISC) https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html - Vendor Advisory | |
| References | (MISC) https://launchpad.support.sap.com/#/notes/2985905 - Permissions Required, Vendor Advisory | |
| First Time |
Sap
Sap s\/4hana |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.5 |
14 Feb 2023, 04:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-02-14 04:15
Updated : 2023-12-10 14:48
NVD link : CVE-2023-24524
Mitre link : CVE-2023-24524
CVE.ORG link : CVE-2023-24524
JSON object : View
Products Affected
sap
- s\/4hana
CWE
CWE-862
Missing Authorization