CVE-2024-42372

Missing Authorization check in SAP NetWeaver AS Java (System Landscape Directory)

State: Published
Severity: 6.5 Medium
Published: Nov 12, 2024
Updated: Nov 12, 2024
Reserved: Jul 31, 2024

Description

Due to missing authorization check in SAP NetWeaver AS Java (System Landscape Directory) an unauthorized user can read and modify some restricted global SLD configurations causing low impact on confidentiality and integrity of the application.

Scores

CVSS	Score	Vector	Source
3.1	6.5 Medium	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N	sap

Weaknesses

CWE-862 Missing Authorization

Affected Products

Product	Versions
SAP NetWeaver AS Java (System Landscape Directory)SAP_SE	LM-SLD 7.5Affected

References

https://me.sap.com/notes/3335394
https://url.sap/sapsecuritypatchday

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.