Security Advisory

CVE-2024-30216

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2024-04-09 01:02:41
Last updated 2024-08-02 01:25:03
Assigner sap
State PUBLISHED

Description

Cash Management in SAP S/4 HANA does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. By exploiting this vulnerability, attacker can add notes in the review request with completed status affecting the integrity of the application. Confidentiality and Availability are not impacted.