CVE-2020-6301

Published: Aug 12, 2020Modified: Nov 21, 2024

8.1

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Exploitability: 2.8 / Impact: 5.2

Source: NVD

Description

SAP ERP (HCM Travel Management), versions - 600, 602, 603, 604, 605, 606, 607, 608, allows an authenticated but unauthorized attacker to read, modify and settle trips, resulting in escalation of privileges, due to Missing Authorization Check.

Affected (8)

Products: Sap: Hcm Travel Management

Sap

1 product

Hcm Travel Management

Configuration A

8 vulnerable

Vulnerable Software	Affected Versions
Sap Hcm Travel Management	Version 600
Sap Hcm Travel Management	Version 602
Sap Hcm Travel Management	Version 603
Sap Hcm Travel Management	Version 604
Sap Hcm Travel Management	Version 605
Sap Hcm Travel Management	Version 606
Sap Hcm Travel Management	Version 607
Sap Hcm Travel Management	Version 608