Skip to content
OpenAdvisories
Medium · 4.3 CVE-2020-6273 EUVD-2020-27423GHSA-mwg4-fjw2-7rjc

SAP S/4 HANA (Fiori UI for General Ledger Accounting), versions 103, 104, does not perform necessary authorization checks for an authentica…

Published Aug 12, 2020 · Updated Aug 4, 2024 · Assigned by sap

Vendor: SAP Product: SAP S/4 HANA (Fiori UI for General Ledger Accounting)

Description

SAP S/4 HANA (Fiori UI for General Ledger Accounting), versions 103, 104, does not perform necessary authorization checks for an authenticated user working with attachment service, allowing the attacker to delete attachments due to Missing Authorization Check.

Affected products

VendorProductAffectedFixed
SAP SE SAP S/4 HANA (Fiori UI for General Ledger Accounting) < 103, < 104 —

References