CVE-2024-22133
Assigner: sap
Published: 2024-03-12T00:32:50.856Z
State: PUBLISHED
affected: defaultStatus: unaffected
product: SAP Fiori Front End Server
vendor: SAP_SE
versions: status: affected
version: 605
descriptions: supportingMedia: base64: no
type: text/html
value: <p>SAP Fiori Front End Server - version 605, allows altering of approver details on the read-only field when sending leave request information. This could lead to creation of request with incorrect approver causing low impact on Confidentiality and Integrity with no impact on Availability of the application.</p>
value: SAP Fiori Front End Server - version 605, allows altering of approver details on the read-only field when sending leave request information. This could lead to creation of request with incorrect approver causing low impact on Confidentiality and Integrity with no impact on Availability of the application.


metrics: cvssV3_1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 4.6
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: LOW
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N
version: 3.1
format: CVSS
scenarios: value: GENERAL
problemTypes: descriptions: cweId: CWE-863
description: CWE-863: Incorrect Authorization
type: CWE
source: discovery: UNKNOWN
title: Improper Access Control in SAP Fiori Front End Server
x_generator: engine: Vulnogram 0.1.0-dev