CVE-2024-42372 — Missing Authorization in SE SAP Netweaver AS Java

CWE-862 — Missing Authorization3 documents3 sources
Severity
6.5MEDIUMNVD
EPSS
0.1%
top 69.13%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
SAP SE SAP Netweaver AS Java
Timeline
PublishedNov 12

Description

Due to missing authorization check in SAP NetWeaver AS Java (System Landscape Directory) an unauthorized user can read and modify some restricted global SLD configurations causing low impact on confidentiality and integrity of the application.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:NExploitability: 3.9 | Impact: 2.5

Affected Packages1 packages

▶CVEListV5sap_se/sap_netweaver_as_javaLM-SLD 7.5

🔴Vulnerability Details

2
GHSA
GHSA-c7xq-233c-6w92: Due to missing authorization check in SAP NetWeaver AS Java (System Landscape Directory) an unauthorized user can read and modify some restricted glob↗2024-11-12
▶
CVEList
Missing Authorization check in SAP NetWeaver AS Java (System Landscape Directory)↗2024-11-12
▶
CVE-2024-42372 — Missing Authorization | cvebase