CVE-2020-6214

4.7MEDIUM

Key Information:

Vendor
SAP
Status
SAP S/4hana (financial Products Subledger)
Vendor
CVE Published:
14 April 2020

Summary

SAP S/4HANA (Financial Products Subledger), version 100, uses an incorrect authorization object in some reports. Although the affected reports are protected with other authorization objects, exploitation of the vulnerability would allow an authenticated attacker to view, change, or delete data, thereby preventing the proper segregation of duties in the system.

Affected Version(s)

SAP S/4HANA (Financial Products Subledger) < 100

References

https://launchpad.support.sap.com/#/notes/2897612
x_refsource_MISC
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageI...
x_refsource_MISC

CVSS V3.1

Score:
4.7
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.