CVE-2022-31589

Published: Jun 14, 2022Modified: Nov 21, 2024

6.5

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Exploitability: 2.8 / Impact: 3.6

Source: NVD

Description

Due to improper authorization check, business users who are using Israeli File from SHAAM program (/ATL/VQ23 transaction), are granted more than needed authorization to perform certain transaction, which may lead to users getting access to data that would otherwise be restricted.

Affected (16)

Products: Sap: Erp Financial Accounting, Erp Localization For Cee Countries, S/4hana

Sap

3 products

Erp Financial Accounting

Erp Localization For Cee Countries

S/4hana

Configuration A

16 vulnerable

Vulnerable Software	Affected Versions
Sap Erp Financial Accounting	Version 618
Sap Erp Financial Accounting	Version 720
Sap Erp Localization For Cee Countries	Version c-cee_110_600
Sap Erp Localization For Cee Countries	Version c-cee_110_602
Sap Erp Localization For Cee Countries	Version c-cee_110_603
Sap Erp Localization For Cee Countries	Version c-cee_110_604
Sap Erp Localization For Cee Countries	Version c-cee_110_700
Sap S/4hana	Version 100
Sap S/4hana	Version 101
Sap S/4hana	Version 102
Sap S/4hana	Version 103
Sap S/4hana	Version 104
Sap S/4hana	Version 105
Sap S/4hana	Version 106
Sap S/4hana	Version 107
Sap S/4hana	Version 108