CVE-2024-45286
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2024
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
Missing Authorization check in SAP Production and Revenue Accounting (Tobin interface)
Due to lack of proper authorization checks when calling user, a function module in obsolete Tobin interface in SAP Production and Revenue Accounting allows unauthorized access that could lead to disclosure of highly sensitive data. There is no impact on integrity or availability.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
SAP Production and Revenue Accounting (Tobin interface)
- Vendor
- SAP_SE
- Product
- SAP Production and Revenue Accounting (Tobin interface)
- Platforms
- Unknown
- Default status
unaffected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| S4CEXT 106 | affected | Unavailable | Unavailable | Unavailable | None listed |
| S4CEXT 107 | affected | Unavailable | Unavailable | Unavailable | None listed |
| S4CEXT 108 | affected | Unavailable | Unavailable | Unavailable | None listed |
| IS-PRA 605 | affected | Unavailable | Unavailable | Unavailable | None listed |
| IS-PRA 606 | affected | Unavailable | Unavailable | Unavailable | None listed |
| IS-PRA 616 | affected | Unavailable | Unavailable | Unavailable | None listed |
| IS-PRA 617 | affected | Unavailable | Unavailable | Unavailable | None listed |
| IS-PRA 618 | affected | Unavailable | Unavailable | Unavailable | None listed |
| IS-PRA 800 | affected | Unavailable | Unavailable | Unavailable | None listed |
| IS-PRA 801 | affected | Unavailable | Unavailable | Unavailable | None listed |
| IS-PRA 802 | affected | Unavailable | Unavailable | Unavailable | None listed |
| IS-PRA 803 | affected | Unavailable | Unavailable | Unavailable | None listed |
| IS-PRA 804 | affected | Unavailable | Unavailable | Unavailable | None listed |
| IS-PRA 805 | affected | Unavailable | Unavailable | Unavailable | None listed |