Skip to content
OpenAdvisories
Medium · 4.3 CVE-2020-6307 EUVD-2020-27457GHSA-6p9c-w66g-f5rf

Automated Note Search Tool (update provided in SAP Basis 7.0, 7.01, 7.02, 7.31, 7.4, 7.5, 7.51, 7.52, 7.53 and 7.54) does not perform suffi…

Published Jan 14, 2020 · Updated Aug 4, 2024 · Assigned by sap

Description

Automated Note Search Tool (update provided in SAP Basis 7.0, 7.01, 7.02, 7.31, 7.4, 7.5, 7.51, 7.52, 7.53 and 7.54) does not perform sufficient authorization checks leading to the reading of sensitive information.

Affected products

VendorProductAffectedFixed
SAP SE Automated Note Search Tool (SAP Basis) < 7.0, < 7.01, < 7.02, < 7.31, < 7.4, < 7.5, < 7.51, < 7.52, < 7.53, < 7.54 —

References