Skip to content
CVE PROGRAM SOURCE RECORD4.3 Medium

CVE-2024-24741

Missing Authorization check in SAP Master Data Governance Material

Description

SAP Master Data Governance for Material Data - versions 618, 619, 620, 621, 622, 800, 801, 802, 803, 804, does not perform necessary authorization check for an authenticated user, resulting in escalation of privileges. This could allow an attacker to read some sensitive information but no impact to integrity and availability.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SAP_SE SAP Master Data Governance Material

Default version status: unaffected

  • 618affected
  • 619affected
  • 620affected
  • 621affected
  • 622affected
  • 800affected
  • 801affected
  • 802affected
  • 803affected
  • 804affected

References