CVE-2024-44112

Description

Due to missing authorization check in SAP for Oil & Gas (Transportation and Distribution), an attacker authenticated as a non-administrative user could call a remote-enabled function which will allow them to delete non-sensitive entries in a user data table. There is no effect on confidentiality or availability.

Reserved 2024-08-20 | Published 2024-09-10 | Updated 2024-09-10 | Assigner sap

Problem types

CWE-862: Missing Authorization

Product status

Default status
unaffected

600
affected

602
affected

603
affected

604
affected

605
affected

606
affected

617
affected

618
affected

800
affected

802
affected

803
affected

804
affected

805
affected

806
affected

807
affected

References

me.sap.com/notes/3505293

url.sap/sapsecuritypatchday

cve.org (CVE-2024-44112)

nvd.nist.gov (CVE-2024-44112)

Download JSON