7.7Yüksek
CVE-2026-24322Missing Authorization check in SAP Solution Tools Plug-In (ST-PI)
Açıklama
SAP Solution Tools Plug-In (ST-PI) contains a function module that does not perform the necessary authorization checks for authenticated users, allowing sensitive information to be disclosed. This vulnerability has a high impact on confidentiality and does not affect integrity or availability.
Zayıflık türü (CWE):
CWE-862
Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.
Etkilenen ürünler ve sürümler
| Üretici | Ürün | Sürümler | |
|---|---|---|---|
| sap | solution tools plug-in | 740 | |
| SAP_SE | SAP Solution Tools Plug-In (ST-PI) | ST-PI 2008_1_700, 2008_1_710, 740, 758 |
Kaynaklar ve yamalar
- https://me.sap.com/notes/3705882
- https://url.sap/sapsecuritypatchday Vendor Advisory
CPE eşleşmeleri (NVD) (4)
cpe:2.3:a:sap:solution_tools_plug-in:740:*:*:*:*:*:*:*cpe:2.3:a:sap:solution_tools_plug-in:758:*:*:*:*:*:*:*cpe:2.3:a:sap:solution_tools_plug-in:2008_1_700:*:*:*:*:*:*:*cpe:2.3:a:sap:solution_tools_plug-in:2008_1_710:*:*:*:*:*:*:*