Skip to content
CVE PROGRAM SOURCE RECORD5.4 Medium

CVE-2024-37172

[CVE-2024-37172] Missing Authorization check in SAP S/4HANA Finance (Advanced Payment Management)

Description

SAP S/4HANA Finance (Advanced Payment Management) does not perform necessary authorization check for an authenticated user, resulting in escalation of privileges. As a result, it has a low impact to confidentiality and availability but there is no impact on the integrity.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SAP_SE SAP S/4HANA Finance (Advanced Payment Management)

Default version status: unaffected

  • S4CORE 107affected
  • S4CORE 108affected

References