CVE-2023-24526

Name of the Vulnerable Software and Affected Versions SAP NetWeaver Application Server Java for Classload Service version 7.50

Description The issue results in escalation of privileges due to the lack of authentication checks for functionalities that require user identity. This has a low impact on data confidentiality, allowing an unassigned user to read non-sensitive server data.

Recommendations For SAP NetWeaver Application Server Java for Classload Service version 7.50, consider implementing proper authentication checks for functionalities that require user identity to prevent escalation of privileges. At the moment, there is no information about a newer version that contains a fix for this vulnerability.