Skip to content
CVE PROGRAM SOURCE RECORD6.3 Medium

CVE-2020-6188

VAT Pro-Rata reports in SAP ERP (SAP_APPL versions 600, 602, 603, 604, 605, 606, 616 and SAP_FIN versions 617, 618, 700, 720, 730) and SAP S/4 HANA (versions 100, 101, 102, 103, 10

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
sap

Description

VAT Pro-Rata reports in SAP ERP (SAP_APPL versions 600, 602, 603, 604, 605, 606, 616 and SAP_FIN versions 617, 618, 700, 720, 730) and SAP S/4 HANA (versions 100, 101, 102, 103, 104) do not perform necessary authorization checks for an authenticated user leading to Missing Authorization Check.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SAP SE SAP ERP (SAP_APPL)

  • = 6.0affected
  • = 6.02affected
  • = 6.03affected
  • = 6.04affected
  • = 6.05affected
  • = 6.06affected
  • = 6.16affected

SAP SE SAP ERP (SAP_FIN)

  • = 6.17affected
  • = 6.18affected
  • = 7.0affected
  • = 7.20affected
  • = 7.30affected

SAP SE SAP S/4 HANA (S4CORE)

  • = 1.0affected
  • = 1.01affected
  • = 1.02affected
  • = 1.03affected
  • = 1.04affected

References