Skip to content
CVE PROGRAM SOURCE RECORD4.3 Medium

CVE-2024-27900

Missing Authorization check in SAP ABAP Platform

Description

Due to missing authorization check, attacker with business user account in SAP ABAP Platform - version 758, 795, can change the privacy setting of job templates from shared to private. As a result, the selected template would only be accessible to the owner.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SAP_SE SAP ABAP Platform

Default version status: unaffected

  • 758affected
  • 795affected

References