PT-2026-7217 · Sap · Sap Business Workflow
CVE-2026-24312
·
Publicado
2026-02-10
·
Atualizado
2026-02-10
CVSS v3.1
5.2
Média
| Vetor | AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:H/A:N |
Name of the Vulnerable Software and Affected Versions
SAP Business Workflow (affected versions not specified)
Description
A flaw in authorization checks within SAP Business Workflow allows for privilege escalation. An authenticated administrative user can circumvent role-based access controls by exploiting permissions from a less sensitive function to perform unauthorized, high-privilege actions. This poses a significant risk to data integrity.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Missing Authorization
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Sap Business Workflow