Skip to content
CVE PROGRAM SOURCE RECORD6.3 Medium

CVE-2024-24739

Missing authorization check in SAP BAM (Bank Account Management)

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
sap

Description

SAP Bank Account Management (BAM) allows an authenticated user with restricted access to use functions which can result in escalation of privileges with low impact on confidentiality, integrity and availability of the application.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SAP_SE SAP BAM (Bank Account Management)

Default version status: unaffected

  • SAP_FIN 618affected
  • SAP_FIN 730affected
  • S4CORE 100affected
  • 101affected

References