CVE-2024-41728

Description

Due to missing authorization check, SAP NetWeaver Application Server for ABAP and ABAP Platform allows an attacker logged in as a developer to read objects contained in a package. This causes an impact on confidentiality, as this attacker would otherwise not have access to view these objects.

Reserved 2024-07-22 | Published 2024-09-10 | Updated 2024-09-10 | Assigner sap

Problem types

CWE-862: Missing Authorization

Product status

Default status
unaffected

700
affected

701
affected

702
affected

731
affected

740
affected

750
affected

751
affected

752
affected

753
affected

754
affected

755
affected

756
affected

757
affected

758
affected

912
affected

References

me.sap.com/notes/3496410

url.sap/sapsecuritypatchday

cve.org (CVE-2024-41728)

nvd.nist.gov (CVE-2024-41728)

Download JSON