Authorization Bypass in SAP ERP Tax Reporting Features

CVE-2020-6212

What is CVE-2020-6212?

Certain localized tax reporting functionalities in SAP ERP and S/4 HANA exhibit a vulnerability due to insufficient authorization checks. Specifically, the Egypt localized withholding tax reports—comprising the Clearing of Liabilities and Remittance Statements—may allow an authenticated user to access, modify, or manipulate sensitive tax report data without appropriate permissions. This oversight poses a significant risk as it undermines the integrity and confidentiality of tax-related information.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References