CVE-2024-45286

MEDIUM

SAP Production and Revenue Accounting - Info Disclosure

Title source: llm
STIX 2.1

Description

Due to lack of proper authorization checks when calling user, a function module in obsolete Tobin interface in SAP Production and Revenue Accounting allows unauthorized access that could lead to disclosure of highly sensitive data. There is no impact on integrity or availability.

References (2)

Core 2
Core References

Scores

CVSS v3 6.5
EPSS 0.0012
EPSS Percentile 30.5%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-862
Status published
Products (14)
SAP_SE/SAP Production and Revenue Accounting (Tobin interface) IS-PRA 605
SAP_SE/SAP Production and Revenue Accounting (Tobin interface) IS-PRA 606
SAP_SE/SAP Production and Revenue Accounting (Tobin interface) IS-PRA 616
SAP_SE/SAP Production and Revenue Accounting (Tobin interface) IS-PRA 617
SAP_SE/SAP Production and Revenue Accounting (Tobin interface) IS-PRA 618
SAP_SE/SAP Production and Revenue Accounting (Tobin interface) IS-PRA 800
SAP_SE/SAP Production and Revenue Accounting (Tobin interface) IS-PRA 801
SAP_SE/SAP Production and Revenue Accounting (Tobin interface) IS-PRA 802
SAP_SE/SAP Production and Revenue Accounting (Tobin interface) IS-PRA 803
SAP_SE/SAP Production and Revenue Accounting (Tobin interface) IS-PRA 804
... and 4 more
Published Sep 10, 2024
Tracked Since Feb 18, 2026