Insecure Direct Object Reference (IDOR) vulnerability in S4 HANA (Manage checkbook apps)
CVE-2023-41368

2.7LOW

Key Information:

Vendor
SAP
Status
S4 Hana Abap (manage Checkbook Apps)
Vendor
CVE Published:
12 September 2023

Summary

The OData service of the S4 HANA (Manage checkbook apps) - versions 102, 103, 104, 105, 106, 107, allows an attacker to change the checkbook name by simulating an update OData call.

Affected Version(s)

S4 HANA ABAP (Manage checkbook apps) 102

S4 HANA ABAP (Manage checkbook apps) 103

S4 HANA ABAP (Manage checkbook apps) 104

References

https://me.sap.com/notes/3355675
https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-...

CVSS V3.1

Score:
2.7
Severity:
LOW
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.