Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2019-0280

SAP Treasury and Risk Management (EA-FINSERV 6.0, 6.03, 6.04, 6.05, 6.06, 6.16, 6.17, 6.18 and 8.0; S4CORE 1.01, 1.02 and 1.03), does not perform necessary authorization checks for

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
sap

Description

SAP Treasury and Risk Management (EA-FINSERV 6.0, 6.03, 6.04, 6.05, 6.06, 6.16, 6.17, 6.18 and 8.0; S4CORE 1.01, 1.02 and 1.03), does not perform necessary authorization checks for authorization objects T_DEAL_DP and T_DEAL_PD , resulting in escalation of privileges.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SAP SE SAP Treasury and Risk Management(EA-FINSERV)

  • < 6.0affected
  • < 6.03affected
  • < 6.04affected
  • < 6.05affected
  • < 6.06affected
  • < 6.16affected
  • < 6.17affected
  • < 6.18affected
  • < 8.0affected

SAP SE SAP Enterprise Financial Services (S4CORE)

  • < 1.01affected
  • < 1.02affected
  • < 1.03affected

References