CVE-2024-34690: sap student life cycle management

csirt@kutim:~/threat-intel/cve/CVE-2024-34690

CVSS 5.4 · Medium EPSS 0,22%

Kerentanan Missing Authorization pada sap student life cycle management. Skor CVSS 3.1 5.4 (Medium) menurut NVD.

Deskripsi (NVD)

SAP Student Life Cycle Management (SLcM) fails to conduct proper authorization checks for authenticated users, leading to the potential escalation of privileges. On successful exploitation it could allow an attacker to access and edit non-sensitive report variants that are typically restricted, causing minimal impact on the confidentiality and integrity of the application.

Rincian

Terbit di NVD: 11 Juni 2024
Terakhir diubah: 17 Juni 2026
Status NVD: Modified
CVSS 3.1: 5.4 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N · uraikan di kalkulator
Jenis kelemahan (CWE): CWE-862: Missing Authorization
EPSS (30 hari): 0,22% peluang dieksploitasi; lebih tinggi dari 11,9% CVE lain

Produk dan versi terdampak

Vendor	Produk	Versi terdampak
sap	student life cycle management	Versi 618
sap	student life cycle management	Versi 802
sap	student life cycle management	Versi 803
sap	student life cycle management	Versi 804
sap	student life cycle management	Versi 805
sap	student life cycle management	Versi 806
sap	student life cycle management	Versi 807
sap	student life cycle management	Versi 808
sap	student life cycle management	Versi is-ps-ca_617

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

https://support.sap.com/en/my-support/knowledge-base/security-notes-news.html patch · advisory vendor
https://me.sap.com/notes/3457265 permissions required

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:11 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.