Skip to content
CVE PROGRAM SOURCE RECORD4.3 Medium

CVE-2024-39596

[CVE-2024-39596] Missing Authorization check vulnerability in SAP Enable Now

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
sap

Description

Due to missing authorization checks, SAP Enable Now allows an author to escalate privileges to access information which should otherwise be restricted. On successful exploitation, the attacker can cause limited impact on confidentiality of the application.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SAP_SE SAP Enable Now

Default version status: unaffected

  • WPB_MANAGER_CE 10affected
  • WPB_MANAGER_HANA 10affected
  • ENABLE_NOW_CONSUMP_DEL 1704affected

References