CVE-2013-3061

Published: May 1, 2013Modified: Apr 29, 2026

6.5

Vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

Exploitability: 8.0 / Impact: 6.4

Source: NVD

Description

The ISHMED-PATRED_TRANSACT_RFCCALL function in the IS-H Industry-Specific Component Hospital subsystem in SAP Healthcare Industry Solution, and the SAP ERP central component (aka ECC 6), allows remote authenticated users to bypass intended transaction restrictions via unspecified vectors.

Affected (2)

Products: Sap: Erp Central Component, Healthcare Industry Solution

2 products

Erp Central Component

Healthcare Industry Solution

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Sap Erp Central Component	All versions
Sap Healthcare Industry Solution	All versions

Related CWEs

References (8)

http://archives.neohapsis.com/archives/bugtraq/2013-04/0176.html

Source: cve@mitre.org

Broken Link

http://scn.sap.com/docs/DOC-8218

Source: cve@mitre.org

Broken Link

http://www.esnc.de/sap-security-audit-and-scan-services/security-advisories/36-privilege-escalation-in-sap-is-healthcare

Source: cve@mitre.org

Broken Link

https://service.sap.com/sap/support/notes/1691744

Source: cve@mitre.org

Permissions Required

http://archives.neohapsis.com/archives/bugtraq/2013-04/0176.html

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

http://scn.sap.com/docs/DOC-8218

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

http://www.esnc.de/sap-security-audit-and-scan-services/security-advisories/36-privilege-escalation-in-sap-is-healthcare

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

https://service.sap.com/sap/support/notes/1691744

Source: af854a3a-2127-422b-91ae-364da2661108

Permissions Required

Timeline

No history available yet.