PT-2026-24156 · Sap · Sap Customer Checkout

Published 2026-03-10 · Updated 2026-03-10 · CVE-2026-24311

Positive Technologies (AI Summary)

CVSS v3.1

5.6

Medium

Base vector

AV:P/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:L

Name of the Vulnerable Software and Affected Versions SAP Customer Checkout application (affected versions not specified)

Description The SAP Customer Checkout application has design characteristics involving the local storage of operational data using reversible protection mechanisms. Access to this data, combined with user interaction, may allow modifications without validation. These changes could affect system behavior during startup, potentially impacting the application’s confidentiality and integrity.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Cleartext Storage of Sensitive Information

Weakness Enumeration

CWE-312

Related Identifiers

CVE-2026-24311

Affected Products

Sap Customer Checkout

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2026-24311 · Security Note
• https://me.sap.com/notes/3708457 · Note
• https://t.me/CVEtracker/46962 · Telegram Post
• https://twitter.com/infoflowcloud/status/2031295509105619183 · Twitter Post
• https://url.sap/sapsecuritypatchday · Note
• https://t.me/cveNotify/154952 · Telegram Post
• https://twitter.com/CVEnew/status/2031294588753949064 · Twitter Post