Missing Authorization Checks in SAP ERP and SAP S/4 HANA Products
CVE-2020-6188
Key Information:
- Vendor
SAP
- Vendor
- CVE Published:
- 12 February 2020
What is CVE-2020-6188?
Certain reports in SAP ERP and SAP S/4 HANA fail to implement necessary authorization checks for authenticated users. This oversight can potentially allow unauthorized access to sensitive information, posing a significant risk to data integrity and security. Affected versions span several releases of the SAP_APPL and SAP_FIN components, as well as multiple iterations of the SAP S/4 HANA application. Proper authorization checks are critical to ensure that users can only access data and functions that they are permitted to.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
SAP ERP (SAP_APPL) = 6.0 = 6.0
SAP ERP (SAP_APPL) = 6.02 = 6.02
SAP ERP (SAP_APPL) = 6.03 = 6.03
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved