Vulnerability CVE-2024-37175
Published: 2024-07-09

Description:
SAP CRM WebClient does not
perform necessary authorization check for an authenticated user, resulting in
escalation of privileges. This could allow an attacker to access some sensitive
information.

Type:

CWE-862

 (Missing Authorization)

 References:
https://url.sap/sapsecuritypatchday
https://me.sap.com/notes/3467377
Copyright 2024, cxsecurity.com

 

Back to Top