CVE-2024-21736 – Missing Authorization check in SAP S/4HANA Finance (Advanced Payment Management)

https://notcve.org/view.php?id=CVE-2024-21736

09 Jan 2024 — SAP S/4HANA Finance for (Advanced Payment Management) - versions SAPSCORE 128, S4CORE 107, does not perform necessary authorization checks. A function import could be triggered allowing the attacker to create in-house bank accounts leading to low impact on the confidentiality of the application. SAP S/4HANA Finance for (Advanced Payment Management): versiones SAPSCORE 128, S4CORE 107, no realiza las comprobaciones de autorización necesarias. Se podría activar una importación de funciones que permitiera al a... • https://me.sap.com/notes/3260667 • CWE-285: Improper Authorization CWE-863: Incorrect Authorization •