Vulnerabilities > CVE-2024-37175 - Missing Authorization vulnerability in SAP products

CVSS 6.5 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

HIGH

Integrity impact

NONE

Availability impact

NONE

network

low complexity

sap

CWE-862

NVD

Published: 2024-07-09

Updated: 2024-09-09

Summary

SAP CRM WebClient does not perform necessary authorization check for an authenticated user, resulting in escalation of privileges. This could allow an attacker to access some sensitive information.

Vulnerable Configurations

Part	Description	Count
Application	Sap SAP Customer Relationship Management Webclient UI 731 SAP Customer Relationship Management Webclient UI 746 SAP Customer Relationship Management Webclient UI 747 SAP Customer Relationship Management Webclient UI 748 SAP Customer Relationship Management Webclient UI 800 SAP Customer Relationship Management Webclient UI 801 SAP Customer Relationship Management Webclient UI 701 SAP Customer Relationship Management S4Fnd 103 SAP Customer Relationship Management S4Fnd 104 SAP Customer Relationship Management S4Fnd 105 SAP Customer Relationship Management S4Fnd 102 SAP Customer Relationship Management S4Fnd 106 SAP Customer Relationship Management S4Fnd 107 SAP Customer Relationship Management S4Fnd 108	14

Common Weakness Enumeration (CWE)

CWE-862 - Missing Authorization

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References