Privilege Escalation in SAP Healthcare Industry Solution by SAP

CVE-2013-3061

Summary

The ISHMED-PATRED_TRANSACT_RFCCALL function within the IS-H Industry-Specific Component for SAP's Healthcare Industry Solution and the SAP ERP central component (ECC 6) is susceptible to a vulnerability that enables remote authenticated users to bypass crucial transaction limitations. This flaw poses a significant risk as it may allow unauthorized actions that compromise the integrity and confidentiality of sensitive healthcare information. Proper measures should be taken to mitigate this issue and ensure that transaction restrictions are enforced.

References