PT-2024-31538 · Sap · Sap Gui

Published 2024-09-09 · Updated 2024-09-10 · CVE-2024-45285

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L

Name of the Vulnerable Software and Affected Versions SAP GUI (affected versions not specified)

Description The issue allows a low-privileged user to perform a denial of service on any user and also change or delete favourite nodes. This is achieved by sending a crafted packet in the function module targeting specific parameters, resulting in the targeted user losing access to SAP GUI functionality. The impact on the application's integrity and availability is low.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2024-45285

Affected Products

Sap Gui

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2024-45285 · Security Note
• https://me.sap.com/notes/3488039 · Note
• https://twitter.com/CVEnew/status/1833373803478716643 · Twitter Post
• https://url.sap/sapsecuritypatchday · Note
• https://t.me/cvedetector/5161 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1833482185686323293 · Twitter Post