CVE-2024-44116

{"id": "CVE-2024-44116", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "cna@sap.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "impactScore": 1.4, "exploitabilityScore": 2.8}]}, "published": "2024-09-10T03:15:03.490", "references": [{"url": "https://me.sap.com/notes/3488039", "source": "cna@sap.com"}, {"url": "https://url.sap/sapsecuritypatchday", "source": "cna@sap.com"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Primary", "source": "cna@sap.com", "description": [{"lang": "en", "value": "CWE-862"}]}], "descriptions": [{"lang": "en", "value": "The RFC enabled function module allows a low privileged user to add any workbook to any user's workplace favourites. This vulnerability could be utilized to identify usernames and access information about targeted user's workplaces. There is low impact on integrity of the application."}, {"lang": "es", "value": "El m\u00f3dulo de funci\u00f3n habilitado por RFC permite que un usuario con pocos privilegios agregue cualquier libro de trabajo a los favoritos del lugar de trabajo de cualquier usuario. Esta vulnerabilidad podr\u00eda utilizarse para identificar nombres de usuario y acceder a informaci\u00f3n sobre los lugares de trabajo de los usuarios seleccionados. El impacto en la integridad de la aplicaci\u00f3n es bajo."}], "lastModified": "2024-09-10T12:09:50.377", "sourceIdentifier": "cna@sap.com"}