Skip to content
CVE PROGRAM SOURCE RECORD6.4 Medium

CVE-2024-21736

Missing Authorization check in SAP S/4HANA Finance (Advanced Payment Management)

Description

SAP S/4HANA Finance for (Advanced Payment Management) - versions SAPSCORE 128, S4CORE 107, does not perform necessary authorization checks. A function import could be triggered allowing the attacker to create in-house bank accounts leading to low impact on the confidentiality of the application.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SAP_SE SAP S/4HANA Finance (Advanced Payment Management)

Default version status: unaffected

  • SAPSCORE 128affected
  • S4CORE 107affected

References