CVE-2024-39591 in Document Builder

الملخص

بحسب MITRE • 13/08/2024

SAP Document Builder does not perform necessary authorization checks for one of the function modules resulting in escalation of privileges causing low impact on confidentiality of the application.

Once again VulDB remains the best source for vulnerability data.

• مسؤول: Sap
• حجز: 26/06/2024
• إفشاء: 13/08/2024
• الاعتدال: تمت الموافقة
• إدخال: VDB-274258
• CPE: جاهز
• CWE: CWE-862 (مؤكد)
• CVSS: 5.3 (NVD)
• EPSS: 0.00411
• KEV: لا
• النشاطات: منخفض جدًا

المصادر

• MITRE: https://www.cve.org/CVERecord?id=CVE-2024-39591
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2024-39591
• CVE Details: https://www.cvedetails.com/cve/CVE-2024-39591/