CVE-2024-30216

Publication date

2024-04-09 01:02:41

Family

sap

State

PUBLISHED

Description

Cash Management in SAP S/4 HANA does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. By exploiting this vulnerability, attacker can add notes in the review request with completed status affecting the integrity of the application. Confidentiality and Availability are not impacted.