medium4.3
CVE-2024-37175
SAP CRM WebClient does not perform necessary authorization check for an authenticated user, resulting in escalation of privileges.
Impact
SAP CRM WebClient does not perform necessary authorization check for an authenticated user, resulting in escalation of privileges. This could allow an attacker to access some sensitive information.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sap | Customer Relationship Management S4fnd | Versions 102, 103, 104, 105, 106, 107 |
| Sap | Customer Relationship Management Webclient Ui | Versions 701, 731, 746, 747, 748, 800 |