CVE-2024-33000
Assigner: sap
Published: 2024-05-14T03:46:59.914Z
State: PUBLISHED
affected: defaultStatus: unaffected
product: SAP Bank Account Management
vendor: SAP_SE
versions: status: affected
version: 100
status: affected
version: 101
status: affected
version: 102
status: affected
version: 103
status: affected
version: 104
status: affected
version: 105
status: affected
version: 106
status: affected
version: 107
status: affected
version: 108
descriptions: supportingMedia: base64: no
type: text/html
value: SAP Bank Account Management does not perform necessary authorization check for an authorized user, resulting in escalation of privileges. As a result, it has a low impact to confidentiality to the system.
value: SAP Bank Account Management does not perform necessary authorization check for an authorized user, resulting in escalation of privileges. As a result, it has a low impact to confidentiality to the system.
metrics: cvssV3_1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 3.5
baseSeverity: LOW
confidentialityImpact: LOW
integrityImpact: NONE
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N
version: 3.1
format: CVSS
scenarios: value: GENERAL
problemTypes: descriptions: cweId: CWE-862
description: CWE-862: Missing Authorization
type: CWE
source: discovery: UNKNOWN
title: Missing Authorization check in SAP Bank Account Management
x_generator: engine: Vulnogram 0.1.0-dev