Vulnerability Description
SAP Asset Accounting could allow a high privileged attacker to exploit insufficient validation of path information provided by the users and pass it through to the file API's. Thus, causing a considerable impact on confidentiality, integrity and availability of the application.
CVSS Score
HIGH
Related Weaknesses (CWE)
References
- https://me.sap.com/notes/3438234
- https://support.sap.com/en/my-support/knowledge-base/security-notes-news.html?an
- https://me.sap.com/notes/3438234
- https://support.sap.com/en/my-support/knowledge-base/security-notes-news.html?an
FAQ
What is CVE-2024-27901?
CVE-2024-27901 is a vulnerability with a CVSS score of 7.2 (HIGH). SAP Asset Accounting could allow a high privileged attacker to exploit insufficient validation of path information provided by the users and pass it through to the file API's. Thus, causing a consider...
How severe is CVE-2024-27901?
CVE-2024-27901 has been rated HIGH with a CVSS base score of 7.2/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2024-27901?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.