CVE-2020-6268

Published: Jun 10, 2020Modified: Nov 21, 2024

8.1

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Exploitability: 2.8 / Impact: 5.2

Source: NVD

Description

Statutory Reporting for Insurance Companies in SAP ERP (EA-FINSERV versions - 600, 603, 604, 605, 606, 616, 617, 618, 800 and S4CORE versions 101, 102, 103, 104) does not execute the required authorization checks for an authenticated user, allowing an attacker to view and tamper with certain restricted data leading to Missing Authorization Check.

Affected (13)

Products: Sap: Erp (ea Finserv), Erp (s4core)

Sap

2 products

Erp (ea Finserv)

Erp (s4core)

Configuration A

13 vulnerable

Vulnerable Software	Affected Versions
Sap Erp (ea Finserv)	Version 600
Sap Erp (ea Finserv)	Version 603
Sap Erp (ea Finserv)	Version 604
Sap Erp (ea Finserv)	Version 605
Sap Erp (ea Finserv)	Version 606
Sap Erp (ea Finserv)	Version 616
Sap Erp (ea Finserv)	Version 617
Sap Erp (ea Finserv)	Version 618
Sap Erp (ea Finserv)	Version 800
Sap Erp (s4core)	Version 101
Sap Erp (s4core)	Version 102
Sap Erp (s4core)	Version 103
Sap Erp (s4core)	Version 104