SAP S/4HANA Cash Management Vulnerability: Escalation of Privileges
CVE-2024-30217
4.3MEDIUM
What is CVE-2024-30217?
Cash Management in SAP S/4 HANA does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. By exploiting this vulnerability, an attacker can approve or reject a bank account application affecting the integrity of the application. Confidentiality and Availability are not impacted.
Affected Version(s)
SAP S/4 HANA (Cash Management) S4CORE 106
SAP S/4 HANA (Cash Management) S4CORE 107
SAP S/4 HANA (Cash Management) S4CORE 108