Due to missing authorization check, attacker with business user account in SAP ABAP Platform - version 758, 795, can change the privacy setting of job templates from shared to private. As a result, the selected template would only be accessible to the owner.
Metrics
Affected Vendors & Products
References
History
No history.

Status: PUBLISHED
Assigner: sap
Published: 2024-03-12T00:44:15.235Z
Updated: 2024-08-02T00:41:55.483Z
Reserved: 2024-02-27T06:26:16.787Z
Link: CVE-2024-27900

Updated: 2024-05-23T19:01:17.101Z

Status : Awaiting Analysis
Published: 2024-03-12T01:15:49.980
Modified: 2024-11-21T09:05:22.767
Link: CVE-2024-27900

No data.