THREATINT

We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Fathom (Privacy friendly web analytics)
Zendesk (Helpdesk and Chat)

Ok

Home | EN
Support
CVE
PUBLISHED

CVE-2024-34691

Missing Authorization check in SAP S/4HANA (Manage Incoming Payment Files)

Assignersap
Reserved2024-05-07
Published2024-06-11
Updated2024-06-11

Description

Manage Incoming Payment Files (F1680) of SAP S/4HANA does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. As a result, it has high impact on integrity and no impact on the confidentiality and availability of the system.



MEDIUM: 6.5CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Problem types

CWE-862: Missing Authorization

Product status

Default status
unaffected

S4CORE 102
affected

103
affected

104
affected

105
affected

106
affected

107
affected

108
affected

References

https://me.sap.com/notes/3466175

https://support.sap.com/en/my-support/knowledge-base/security-notes-news.html

cve.org CVE-2024-34691

nvd.nist.gov CVE-2024-34691

Download JSON

Share this page
https://cve.threatint.com/CVE/CVE-2024-34691
Find us on
Data Privacy
Terms of Use
Logo BSI Allianz für Cyber-Sicherheit
© Copyright 2024 THREATINT. Made in Cyprus with ❤ + ☼