CVE-2024-47581

Missing Authorization check in SAP HCM (Approve Timesheets version 4)

State: Published
Severity: 4.3 Medium
Published: Dec 10, 2024
Updated: Dec 10, 2024
Reserved: Sep 27, 2024

Description

SAP HCM Approve Timesheets Version 4 application does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges.There is low impact on integrity of the application. Confidentiality and availibility are not impacted.

Scores

CVSS	Score	Vector	Source
3.1	4.3 Medium	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N	sap

Weaknesses

CWE-862 Missing Authorization

Affected Products

Product	Versions
SAP HCMSAP_SE	S4HCMGXX 101Affected

References

https://me.sap.com/notes/3522332
https://url.sap/sapsecuritypatchday

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.