CVE-2022-31597

Published: Jul 12, 2022Modified: Nov 21, 2024

5.4

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Exploitability: 2.8 / Impact: 2.5

Source: NVD

Description

Within SAP S/4HANA - versions S4CORE 101, 102, 103, 104, 105, 106, SAPSCORE 127, the application business partner extension for Spain/Slovakia does not perform necessary authorization checks for a low privileged authenticated user over the network, resulting in escalation of privileges leading to low impact on confidentiality and integrity of the data.

Affected (7)

Products: Sap: S/4hana, Sapscore

Sap

2 products

S/4hana

Sapscore

Configuration A

7 vulnerable

Vulnerable Software	Affected Versions
Sap S/4hana	Version 101
Sap S/4hana	Version 102
Sap S/4hana	Version 103
Sap S/4hana	Version 104
Sap S/4hana	Version 105
Sap S/4hana	Version 106
Sap Sapscore	Version 127