CVE-2024-32730
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
14/05/2024
Last modified:
14/05/2024
Description
SAP Enable Now Manager does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. On successful exploitation, the attacker with the role &#39;Learner&#39; could gain access to other user&#39;s data in manager which will lead to a high impact to the confidentiality of the application.<br />
<br />
Impact
Base Score 3.x
6.50
Severity 3.x
MEDIUM