CVE-2024-42373

sap student life cycle management

TLP:CLEAR

csirt@kutim:~/threat-intel/cve/CVE-2024-42373

Katalog CVE

CVSS 5.4 · Medium EPSS 0,25%

Kerentanan Missing Authorization pada sap student life cycle management. Skor CVSS 3.1 5.4 (Medium) menurut NVD.

Deskripsi (NVD)

SAP Student Life Cycle Management (SLcM) fails to conduct proper authorization checks for authenticated users, leading to the potential escalation of privileges. On successful exploitation it could allow an attacker to delete non-sensitive report variants that are typically restricted, causing minimal impact on the integrity of the application.

Rincian

Terbit di NVD
13 Agustus 2024
Terakhir diubah
17 Juni 2026
Status NVD
Analyzed
CVSS 3.1
5.4 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-862: Missing Authorization
EPSS (30 hari)
0,25% peluang dieksploitasi; lebih tinggi dari 15,1% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
sap student life cycle management Versi 617
sap student life cycle management Versi 618
sap student life cycle management Versi 802
sap student life cycle management Versi 803
sap student life cycle management Versi 804
sap student life cycle management Versi 805
sap student life cycle management Versi 806
sap student life cycle management Versi 807
sap student life cycle management Versi 808

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:11 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.