CVE-2024-37180

Publication date

2024-07-09 04:41:32

Family

sap

State

PUBLISHED

Description

Under certain conditions SAP NetWeaver Application Server for ABAP and ABAP Platform allows an attacker to access remote-enabled function module with no further authorization which would otherwise be restricted, the function can be used to read non-sensitive information with low impact on confidentiality of the application.