CVE-2024-4138: Manage Bank Statement ReProcessing Rules does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. By…

PriorityP423medium4.3CVSS 3.1

AVNACLPRLUINSUCNILAN

EPSS

0.29%

20.5th percentile

Manage Bank Statement ReProcessing Rules does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. By exploiting this vulnerability, an attacker can enable/disable the sharing rule of other users affecting the integrity of the application. Confidentiality and Availability are not affected.

Affected

5 ranges

Vendor	Product	Version range	Fixed in
sap_se	sap_s_4_hana	—	—
sap_se	sap_s_4_hana	—	—
sap_se	sap_s_4_hana	—	—
sap_se	sap_s_4_hana	—	—
sap_se	sap_s_4_hana	—	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.