Authorization Flaw in SAP Disclosure Management 10.1

CVE-2020-6209

What is CVE-2020-6209?

SAP Disclosure Management version 10.1 is affected by an authorization flaw, where an authenticated user can access administration accounts without the necessary roles. This vulnerability occurs due to the lack of proper authorization checks, potentially enabling unauthorized modifications and access to sensitive data. Users should take immediate action to secure their systems against this issue and ensure that proper role assignments and authorization checks are enforced to prevent unauthorized access.

References