CyberzSOC

This flaw allows remote attackers to bypass authentication mechanisms, potentially leading to full system compromise. The vulnerability has a CVSS score of 9.8, highlighting its severity. CVE-2024-41730 is a “missing authentication check” vulnerability. If Single Sign-On is enabled for Enterprise authentication, an attacker can exploit a REST endpoint to obtain a logon token and compromise the system entirely, affecting confidentiality, integrity, and availability [1,2]. CERT-EU strongly advises applying the security patches provided by SAP immediately to mitigate this critical vulnerability.