What is CVE-2024-45286?

CVE-2024-45286 is a medium-severity vulnerability in Sap Se Production And Revenue Accounting (Tobin Interface), classified under Missing Authorization. CVSS score: 6.5/10. Published 2024-09-10.

How severe is CVE-2024-45286?

Medium severity. CVSS v3 base score is 6.5 out of 10.

Is CVE-2024-45286 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Auth bypass in Sap Se Production And Revenue Accounting (Tobin Interface)

CVE-2024-45286

Due to lack of proper authorization checks when calling user, a function module in obsolete Tobin interface in SAP Production and Revenue Accounting allows unauthorized access that could lead to disclosure of highly sensitive data. There is no impact on integrity or availability.

Vulnerability class: Broken Access Control

EPSS: 0.003 (25.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N.

Affected products

Sap_se Sap Production And Revenue Accounting (Tobin Interface) — versions S4CEXT 106, S4CEXT 107, S4CEXT 108

Weakness classification (CWE)

CWE-862 — Missing Authorization

Public proof-of-concept exploits

fkie-cad/nvd-json-data-feeds

References

Frequently asked questions

What is CVE-2024-45286?: CVE-2024-45286 is a medium-severity vulnerability in Sap Se Production And Revenue Accounting (Tobin Interface), classified under Missing Authorization. CVSS score: 6.5/10. Published 2024-09-10.
How severe is CVE-2024-45286?: Medium severity. CVSS v3 base score is 6.5 out of 10.
Is CVE-2024-45286 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.