CVE-2024-47581

{"id": "CVE-2024-47581", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "cna@sap.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "impactScore": 1.4, "exploitabilityScore": 2.8}]}, "published": "2024-12-10T01:15:06.127", "references": [{"url": "https://me.sap.com/notes/3522332", "source": "cna@sap.com"}, {"url": "https://url.sap/sapsecuritypatchday", "source": "cna@sap.com"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Secondary", "source": "cna@sap.com", "description": [{"lang": "en", "value": "CWE-862"}]}], "descriptions": [{"lang": "en", "value": "SAP HCM Approve Timesheets Version 4 application does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges.There is low impact on integrity of the application. Confidentiality and availibility are not impacted."}, {"lang": "es", "value": "La aplicaci\u00f3n SAP HCM Approve Timesheets versi\u00f3n 4 no realiza las comprobaciones de autorizaci\u00f3n necesarias para un usuario autenticado, lo que da como resultado una escalada de privilegios. El impacto en la integridad de la aplicaci\u00f3n es bajo. La confidencialidad y la disponibilidad no se ven afectadas."}], "lastModified": "2024-12-10T01:15:06.127", "sourceIdentifier": "cna@sap.com"}