CVE-2024-42373
5.4
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
Exploitability: 2.8 / Impact: 2.5
Source: NVD
Description
SAP Student Life Cycle Management (SLcM) fails to conduct proper authorization checks for authenticated users, leading to the potential escalation of privileges. On successful exploitation it could allow an attacker to delete non-sensitive report variants that are typically restricted, causing minimal impact on the integrity of the application.
Affected (9)
Products: Sap: Student Life Cycle Management
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Version 617 |
References (2)
Timeline
No history available yet.