VYPR
← All advisories
Medium severity4.3NVD Advisory· Published Feb 13, 2024· Updated Jun 17, 2026

CVE-2024-24741

CVE-2024-24741

Description

SAP Master Data Governance for Material Data - versions 618, 619, 620, 621, 622, 800, 801, 802, 803, 804, does not perform necessary authorization check for an authenticated user, resulting in escalation of privileges. This could allow an attacker to read some sensitive information but no impact to integrity and availability.

Affected products

12
  • SAP/Master Data Governance For Material Data11 versions
    cpe:2.3:a:sap:master_data_governance_for_material_data:618:*:*:*:*:*:*:*+ 10 more
    • cpe:2.3:a:sap:master_data_governance_for_material_data:618:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:master_data_governance_for_material_data:619:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:master_data_governance_for_material_data:620:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:master_data_governance_for_material_data:621:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:master_data_governance_for_material_data:622:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:master_data_governance_for_material_data:800:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:master_data_governance_for_material_data:801:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:master_data_governance_for_material_data:802:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:master_data_governance_for_material_data:803:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:master_data_governance_for_material_data:804:*:*:*:*:*:*:*
    • (no CPE)range: 618, 619, 620, 621, 622, 800, 801, 802, 803, 804
  • SAP/Master Data Governancecpe-rescue
    Range: 618

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.