Skip to content
CVE PROGRAM SOURCE RECORD4.3 Medium

CVE-2020-6316

SAP ERP and SAP S/4 HANA allows an authenticated user to see cost records to objects to which he has no authorization in PS reporting, leading to Missing Authorization check.

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
sap

Description

SAP ERP and SAP S/4 HANA allows an authenticated user to see cost records to objects to which he has no authorization in PS reporting, leading to Missing Authorization check.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SAP SE SAP ERP

  • < 600affected
  • < 602affected
  • < 603affected
  • < 604affected
  • < 605affected
  • < 606affected
  • < 616affected
  • < 617affected
  • < 618affected

SAP SE SAP S/4 HANA

  • < 100affected
  • < 101affected
  • < 102affected
  • < 103affected
  • < 104affected

References