← Database

CVE-2026-24312

MEDIUM CVSS: 5.2 Published: 2026-02-10 Modified: 2026-06-17

Description

An erroneous authorization check in SAP Business Workflow leads to privilege escalation. An authenticated administrative user can bypass role restrictions by leveraging permissions from a less sensitive function to execute unauthorized, high-privilege actions. This has a high impact on data integrity, with low impact on confidentiality and no impact on availability of the application.

Affected Platforms

Sap Sap Basis

Weakness Type

CWE-862

References