CVE-2024-32730

MEDIUM

SAP Enable Now Manager - Privilege Escalation

Title source: llm
STIX 2.1

Description

SAP Enable Now Manager does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. On successful exploitation, the attacker with the role 'Learner' could gain access to other user's data in manager which will lead to a high impact to the confidentiality of the application.

Scores

CVSS v3 6.5
EPSS 0.0011
EPSS Percentile 29.7%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-862
Status published
Products (1)
SAP_SE/SAP Enable Now 1704
Published May 14, 2024
Tracked Since Feb 18, 2026