VULNERABILITY INTELLIGENCE

CVE-2024-39592

CVSS score7.7 HIGH
EPSS probability0.42%
CISA KEVNot currently listed
Published2024-07-09
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

Description

Elements of PDCE does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. This allows an attacker to read sensitive information causing high impact on the confidentiality of the application.

Weakness classification

  • cna@sap.com: CWE-862

Primary references