CVE-2020-6316

Published: Nov 10, 2020Modified: Nov 21, 2024

4.3

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Exploitability: 2.8 / Impact: 1.4

Source: NVD

Description

SAP ERP and SAP S/4 HANA allows an authenticated user to see cost records to objects to which he has no authorization in PS reporting, leading to Missing Authorization check.

Affected (14)

Products: Sap: Erp, S/4hana

Sap

2 products

Erp

S/4hana

Configuration A

14 vulnerable

Vulnerable Software	Affected Versions
Sap Erp	Version 600
Sap Erp	Version 602
Sap Erp	Version 603
Sap Erp	Version 604
Sap Erp	Version 605
Sap Erp	Version 606
Sap Erp	Version 616
Sap Erp	Version 617
Sap Erp	Version 618
Sap S/4hana	Version 100
Sap S/4hana	Version 101
Sap S/4hana	Version 102
Sap S/4hana	Version 103
Sap S/4hana	Version 104