Vulnerability · Published Feb 14, 2023 · Assigned by sap
CVE-2023-24524
Medium 6.5
In plain English
A medium-severity missing authorization in S/4 HANA (Map Treasury Correspondence Format Data) from SAP. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 45% of all known vulnerabilities).
Severity (CVSS 3.1)6.5Medium
Exploit odds (30 days)0.5%top 55.4% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
SAP S/4 HANA Map Treasury Correspondence Format Data does not perform necessary authorization check for an authenticated user, resulting in escalation of privileges. This could allow an attacker to delete the data with a high impact to availability.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| SAP | S/4 HANA (Map Treasury Correspondence Format Data) | 104105 |
Weakness: CWE-862 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H