CVE-2023-24528 (published 2023-02-14T03:18:53.948Z)
SAP Fiori apps for Travel Management in SAP ERP (My Travel Requests) - version 600,  allows an authenticated attacker to exploit a certain misconfigured application endpoint to view sensitive data. This endpoint is normally exposed over the network and successful exploitation can lead to exposure of data like travel documents.


Affected products: Vendor: SAP
Product: Fiori apps 1.0 for travel management in SAP ERP (My Travel Requests)
Versions: 600