Skip to content
OpenAdvisories
Medium · 6.5 CVE-2020-6270 EUVD-2020-27420GHSA-3x3x-gvp4-q59h

SAP NetWeaver AS ABAP (Banking Services), versions - 710, 711, 740, 750, 751, 752, 75A, 75B, 75C, 75D, 75E, does not perform necessary auth…

Published Jun 10, 2020 · Updated Aug 4, 2024 · Assigned by sap

Description

SAP NetWeaver AS ABAP (Banking Services), versions - 710, 711, 740, 750, 751, 752, 75A, 75B, 75C, 75D, 75E, does not perform necessary authorization checks for an authenticated user due to Missing Authorization Check, allowing wrong and unexpected change of individual conditions by a malicious user leading to wrong prices.

Affected products

VendorProductAffectedFixed
SAP SE SAP NetWeaver AS ABAP (Banking Services) < 710, < 711, < 740, < 750, < 751, < 752, < 75A, < 75B, < 75C, < 75D, < 75E —

References