CVE-2019-0280

Published: May 14, 2019Modified: Nov 21, 2024

8.8

Vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: NVD

Description

SAP Treasury and Risk Management (EA-FINSERV 6.0, 6.03, 6.04, 6.05, 6.06, 6.16, 6.17, 6.18 and 8.0; S4CORE 1.01, 1.02 and 1.03), does not perform necessary authorization checks for authorization objects T_DEAL_DP and T_DEAL_PD , resulting in escalation of privileges.

Affected (9)

Products: Sap: Treasury And Risk Management

Sap

1 product

Treasury And Risk Management

Configuration A

9 vulnerable

Vulnerable Software	Affected Versions
Sap Treasury And Risk Management	Version 6.03
Sap Treasury And Risk Management	Version 6.04
Sap Treasury And Risk Management	Version 6.05
Sap Treasury And Risk Management	Version 6.06
Sap Treasury And Risk Management	Version 6.0
Sap Treasury And Risk Management	Version 6.16
Sap Treasury And Risk Management	Version 6.17
Sap Treasury And Risk Management	Version 6.18
Sap Treasury And Risk Management	Version 8.0