CVE-2024-47587

Missing authorization check in SAP Cash Management (Cash Operations)

State: Published
Severity: 3.5 Low
Published: Nov 12, 2024
Updated: Nov 12, 2024
Reserved: Sep 27, 2024

Description

Cash Operations does not perform necessary authorization check for an authenticated user, resulting in escalation of privileges causing low impact to confidentiality to the application.

Scores

CVSS	Score	Vector	Source
3.1	3.5 Low	CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N	sap

Weaknesses

CWE-862 Missing Authorization

Affected Products

Product	Versions
SAP Cash Management (Cash Operations)SAP_SE	S4CORE 103Affected 104Affected 105Affected 106Affected 107Affected 108Affected

References

https://me.sap.com/notes/3498470
https://url.sap/sapsecuritypatchday

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.