The RFC enabled function module allows a low privileged user to delete the workplace favourites of any user. This vulnerability could be utilized to identify usernames and access information about targeted user's workplaces and nodes. There is low impact on integrity and availability of the application.
Metrics
Affected Vendors & Products
No data.
No data.
No data.
No data.
Advisories
| Source | ID | Title |
|---|---|---|
 EUVD |
EUVD-2024-39576 | The RFC enabled function module allows a low privileged user to delete the workplace favourites of any user. This vulnerability could be utilized to identify usernames and access information about targeted user's workplaces and nodes. There is low impact on integrity and availability of the application. |
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
Tue, 10 Sep 2024 14:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|
Tue, 10 Sep 2024 03:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | The RFC enabled function module allows a low privileged user to delete the workplace favourites of any user. This vulnerability could be utilized to identify usernames and access information about targeted user's workplaces and nodes. There is low impact on integrity and availability of the application. | |
| Title | Multiple vulnerabilities in SAP NetWeaver Application Server for ABAP and ABAP Platform | |
| Weaknesses | CWE-862 | |
| References |
| |
| Metrics |
cvssV3_1
|
MITRE
Status: PUBLISHED
Assigner: sap
Published:
Updated: 2024-09-10T14:05:07.594Z
Reserved: 2024-07-31T04:09:36.222Z
Link: CVE-2024-42371
Vulnrichment
Updated: 2024-09-10T13:44:39.281Z
NVD
Status : Awaiting Analysis
Published: 2024-09-10T03:15:02.240
Modified: 2024-09-10T12:09:50.377
Link: CVE-2024-42371
Redhat
No data.
OpenCVE Enrichment
No data.