Skip to content
CVE PROGRAM SOURCE RECORD2.8 Low

CVE-2023-32112

Missing Authorization Check in Vendor Master Hierarchy

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
sap

Description

Vendor Master Hierarchy - versions SAP_APPL 500, SAP_APPL 600, SAP_APPL 602, SAP_APPL 603, SAP_APPL 604, SAP_APPL 605, SAP_APPL 606, SAP_APPL 616, SAP_APPL 617, SAP_APPL 618, S4CORE 100, does not perform necessary authorization checks for an authenticated user to access some of its function. This could lead to modification of data impacting the integrity of the system.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SAP_SE Vendor Master Hierarchy

Default version status: unaffected

  • SAP_APPL 500affected
  • SAP_APPL 600affected
  • SAP_APPL 602affected
  • SAP_APPL 603affected
  • SAP_APPL 604affected
  • SAP_APPL 605affected
  • SAP_APPL 606affected
  • SAP_APPL 616affected
  • SAP_APPL 617affected
  • SAP_APPL 618affected
  • S4CORE 100affected

References