Beveiligingsadvies

CVE-2024-41728

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2024-09-10 04:00:56
Laatst bijgewerkt 2024-09-10 13:26:14
Toegewezen door sap
CVSS-score 2.7
Status PUBLISHED

Beschrijving

Due to missing authorization check, SAP NetWeaver Application Server for ABAP and ABAP Platform allows an attacker logged in as a developer to read objects contained in a package. This causes an impact on confidentiality, as this attacker would otherwise not have access to view these objects.