Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2024-45286

Missing Authorization check in SAP Production and Revenue Accounting (Tobin interface)

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
sap

Description

Due to lack of proper authorization checks when calling user, a function module in obsolete Tobin interface in SAP Production and Revenue Accounting allows unauthorized access that could lead to disclosure of highly sensitive data. There is no impact on integrity or availability.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SAP_SE SAP Production and Revenue Accounting (Tobin interface)

Default version status: unaffected

  • S4CEXT 106affected
  • S4CEXT 107affected
  • S4CEXT 108affected
  • IS-PRA 605affected
  • IS-PRA 606affected
  • IS-PRA 616affected
  • IS-PRA 617affected
  • IS-PRA 618affected
  • IS-PRA 800affected
  • IS-PRA 801affected
  • IS-PRA 802affected
  • IS-PRA 803affected
  • IS-PRA 804affected
  • IS-PRA 805affected

References