Skip to content
OpenAdvisories
Medium · 6.3 CVE-2020-6188 EUVD-2020-27338GHSA-5f97-p8qf-7px9

VAT Pro-Rata reports in SAP ERP (SAP_APPL versions 600, 602, 603, 604, 605, 606, 616 and SAP_FIN versions 617, 618, 700, 720, 730) and SAP …

Published Feb 12, 2020 · Updated Aug 4, 2024 · Assigned by sap

Description

VAT Pro-Rata reports in SAP ERP (SAP_APPL versions 600, 602, 603, 604, 605, 606, 616 and SAP_FIN versions 617, 618, 700, 720, 730) and SAP S/4 HANA (versions 100, 101, 102, 103, 104) do not perform necessary authorization checks for an authenticated user leading to Missing Authorization Check.

Affected products

VendorProductAffectedFixed
SAP SE SAP ERP (SAP_APPL) = 6.0, = 6.02, = 6.03, = 6.04, = 6.05, = 6.06, = 6.16 —
SAP SE SAP ERP (SAP_FIN) = 6.17, = 6.18, = 7.0, = 7.20, = 7.30 —
SAP SE SAP S/4 HANA (S4CORE) = 1.0, = 1.01, = 1.02, = 1.03, = 1.04 —

References