7.7Alta
CVE-2026-24322Missing Authorization check in SAP Solution Tools Plug-In (ST-PI)
Descripción
SAP Solution Tools Plug-In (ST-PI) contains a function module that does not perform the necessary authorization checks for authenticated users, allowing sensitive information to be disclosed. This vulnerability has a high impact on confidentiality and does not affect integrity or availability.
Debilidad (CWE):
CWE-862
Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.
Productos y versiones afectados
| Fabricante | Producto | Versiones | |
|---|---|---|---|
| sap | solution tools plug-in | 740 | |
| SAP_SE | SAP Solution Tools Plug-In (ST-PI) | ST-PI 2008_1_700, 2008_1_710, 740, 758 |
Referencias y parches
- https://me.sap.com/notes/3705882
- https://url.sap/sapsecuritypatchday Vendor Advisory
Coincidencias CPE (NVD) (4)
cpe:2.3:a:sap:solution_tools_plug-in:740:*:*:*:*:*:*:*cpe:2.3:a:sap:solution_tools_plug-in:758:*:*:*:*:*:*:*cpe:2.3:a:sap:solution_tools_plug-in:2008_1_700:*:*:*:*:*:*:*cpe:2.3:a:sap:solution_tools_plug-in:2008_1_710:*:*:*:*:*:*:*