Skip to content
CVE PROGRAM SOURCE RECORD6.3 Medium

CVE-2023-35870

Improper Access Control in SAP S/4HANA (Manage Journal Entry Template)

Description

When creating a journal entry template in SAP S/4HANA (Manage Journal Entry Template) - versions S4CORE 104, 105, 106, 107, an attacker could intercept the save request and change the template, leading to an impact on confidentiality and integrity of the resource. Furthermore, a standard template could be deleted, hence making the resource temporarily unavailable.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SAP_SE SAP S/4HANA (Manage Journal Entry Template)

Default version status: unaffected

  • S4CORE 104affected
  • 105affected
  • 106affected
  • 107affected

References