← Back

CVE-2024-39591

nvd nist
Published: Aug 13, 2024Modified: Jun 17, 2026

JSON object

Loading...
5.3
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Exploitability: 3.9 / Impact: 1.4
Source: NVD

Description

SAP Document Builder does not perform necessary authorization checks for one of the function modules resulting in escalation of privileges causing low impact on confidentiality of the application.

Affected (12)

Sap
1 product
Document Builder
Configuration A
12 vulnerable
Vulnerable SoftwareAffected Versions
Sap
Document Builder
Version s4fnd_102
Document Builder
Version s4fnd_103
Document Builder
Version s4fnd_104
Document Builder
Version s4fnd_105
Document Builder
Version s4fnd_106
Document Builder
Version s4fnd_107
Document Builder
Version s4fnd_108
Document Builder
Version sap_bs_fnd_702
Document Builder
Version sap_bs_fnd_731
Document Builder
Version sap_bs_fnd_746
Document Builder
Version sap_bs_fnd_747
Document Builder
Version sap_bs_fnd_748

Related CWEs

CWE-862
Missing Authorization
The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

References (2)

Source: cna@sap.com
Permissions Required
Source: cna@sap.com
Vendor Advisory

Timeline

No history available yet.