SAP Asset Accounting Vulnerability Could Lead to Data Breaches
CVE-2024-27901

Currently unrated

Key Information:

Vendor
SAP
Vendor
CVE Published:
9 April 2024

Summary

SAP Asset Accounting has a potential vulnerability where insufficient validation of user-provided path information can be exploited by an attacker with elevated privileges. This flaw allows for the manipulation of data passed through the file API, thereby threatening the application's confidentiality, integrity, and overall availability. Organizations using SAP Asset Accounting should assess their configurations and apply necessary security measures to mitigate risks associated with this vulnerability.

References

https://me.sap.com/notes/3438234
https://support.sap.com/en/my-support/knowledge-base/secu...

Timeline

  • Vulnerability published

.