CVE-2026-24311
Insecure Storage Protection vulnerability in SAP Customer Checkout 2.0
- State
- Published
- Severity
- 5.6 Medium
- Published
- Mar 10, 2026
- Updated
- Mar 10, 2026
- Reserved
- Jan 21, 2026
Description
The SAP Customer Checkout application exhibits certain design characteristics that involve locally storing operational data using reversible protection mechanisms. Access to this data, combined with user?initiated interaction, may allow modifications to occur without validation. Such changes could affect system behaviour during startup, resulting in a high impact on the application's confidentiality and integrity, with a low impact on availability.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 5.6 Medium | CVSS:3.1/AV:P/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:L | sap |
Weaknesses
- CWE-312 Cleartext Storage of Sensitive Information
Affected Products
| Product | Versions |
|---|---|
SAP Customer Checkout 2.0SAP_SE |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.