7.7Hoch
CVE-2026-24322Missing Authorization check in SAP Solution Tools Plug-In (ST-PI)
Beschreibung
SAP Solution Tools Plug-In (ST-PI) contains a function module that does not perform the necessary authorization checks for authenticated users, allowing sensitive information to be disclosed. This vulnerability has a high impact on confidentiality and does not affect integrity or availability.
Schwachstellentyp (CWE):
CWE-862
Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.
Betroffene Produkte und Versionen
| Hersteller | Produkt | Versionen | |
|---|---|---|---|
| sap | solution tools plug-in | 740 | |
| SAP_SE | SAP Solution Tools Plug-In (ST-PI) | ST-PI 2008_1_700, 2008_1_710, 740, 758 |
Referenzen und Patches
- https://me.sap.com/notes/3705882
- https://url.sap/sapsecuritypatchday Vendor Advisory
CPE-Treffer (NVD) (4)
cpe:2.3:a:sap:solution_tools_plug-in:740:*:*:*:*:*:*:*cpe:2.3:a:sap:solution_tools_plug-in:758:*:*:*:*:*:*:*cpe:2.3:a:sap:solution_tools_plug-in:2008_1_700:*:*:*:*:*:*:*cpe:2.3:a:sap:solution_tools_plug-in:2008_1_710:*:*:*:*:*:*:*