CVE-2024-37176 MEDIUM

CVE-2024-37176: Missing Authorization check in SAP BW/4HANA Transformation and DTP

Vendor Sap_Se
Product SAP BW/4HANA Transformation and Data Transfer Process
Weakness CWE-862 · Missing authorization
Published June 11, 2024
Last update August 2, 2024
View on NVD All CVEs

CVSS base score

5.5/10
Attack vector Network
Attack complexity Low
Privileges required High
User interaction None
Confidentiality None
Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:L

What the vulnerability does

01Description

SAP BW/4HANA Transformation and Data Transfer Process (DTP) allows an authenticated attacker to gain higher access levels than they should have by exploiting improper authorization checks. This results in escalation of privileges. It has no impact on the confidentiality of data but may have low impacts on the integrity and availability of the application.

Key dates

02Disclosure timeline

June 11, 2024 CVE published
August 2, 2024 Record updated