CVE-2024-27900

MediumCVSS 5.3/10Last modified Jun 17, 2026

Description

Due to missing authorization check, attacker with business user account in SAP ABAP Platform - version 758, 795, can change the privacy setting of job templates from shared to private. As a result, the selected template would only be accessible to the owner.

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Weakness enumeration

CWE-862

Affected software

No affected versions have been published.

Timeline

Published: Mar 12, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-279017.2SAP Asset Accounting could allow a high privileged attacker to exploit insufficient validation of path information provided by the users and CVE-2024-279026.1Applications based on SAP GUI for HTML in SAP NetWeaver AS ABAP - versions 7.89, 7.93, do not sufficiently encode user-controlled inputs, re CVE-2024-279039.8OpenVPN plug-ins on Windows with OpenVPN 2.6.9 and earlier could be loaded from any directory, which allows an attacker to load an arbitrary CVE-2024-279059.1** UNSUPPORTED WHEN ASSIGNED ** Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Aurora. An endpoint expo CVE-2024-279065.9Apache Airflow, versions before 2.8.2, has a vulnerability that allows authenticated users to view DAG code and import errors of DAGs they d CVE-2024-279077.8A vulnerability has been identified in Simcenter Femap (All versions < V2306.0000). The affected application contains an out of bounds write CVE-2024-279084.9A buffer overflow vulnerability was reported in the HTTPS service of some Lenovo Printers that could result in denial of service.CVE-2024-279094.9A denial of service vulnerability was reported in the HTTPS service of some Lenovo Printers that could result in a system reboot.CVE-2024-27915.4The Metform Elementor Contact Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's widgets in all CVE-2024-279105.3A vulnerability was reported in some Lenovo Printers that could allow an unauthenticated attacker to reboot the printer without authenticati CVE-2024-279117.5A vulnerability was reported in some Lenovo Printers that could allow an unauthenticated attacker to obtain the administrator password.CVE-2024-279127.5A denial of service vulnerability was reported in some Lenovo Printers that could allow an attacker to cause the device to crash by sending