CVE-2024-41736

MEDIUM

SAP Permit to Work - Authenticated Exposure of Sensitive Information

Title source: llm

Description

Under certain conditions SAP Permit to Work allows an authenticated attacker to access information which would otherwise be restricted causing low impact on the confidentiality of the application.

References (2)

Core 2

Core References

Permissions Required

https://me.sap.com/notes/3475427

Vendor Advisory

https://url.sap/sapsecuritypatchday

Scores

CVSS v3 4.3

EPSS 0.0042

EPSS Percentile 62.3%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-200

Status published

Products (2)

sap/permit_to_work uis4hop1_800

sap/permit_to_work uis4hop1_900

Published Aug 13, 2024

Tracked Since Feb 18, 2026