VYPR
← All advisories
Medium severity6.5NVD Advisory· Published Aug 13, 2024· Updated Jun 17, 2026

CVE-2024-42376

CVE-2024-42376

Description

SAP Shared Service Framework does not perform necessary authorization check for an authenticated user, resulting in escalation of privileges. On successful exploitation, an attacker can cause a high impact on confidentiality of the application.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

7
  • SAP/Shared Service Framework7 versions
    cpe:2.3:a:sap:shared_service_framework:sap_bs_fnd_702:*:*:*:*:*:*:*+ 6 more
    • cpe:2.3:a:sap:shared_service_framework:sap_bs_fnd_702:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:shared_service_framework:sap_bs_fnd_731:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:shared_service_framework:sap_bs_fnd_746:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:shared_service_framework:sap_bs_fnd_747:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:shared_service_framework:sap_bs_fnd_748:*:*:*:*:*:*:*
    • (no CPE)
    • (no CPE)range: SAP_BS_FND 702

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.