Skip to content
OpenAdvisories
Medium · 4.3 CVE-2020-6316 EUVD-2020-27466GHSA-2j5g-6x52-988w

SAP ERP and SAP S/4 HANA allows an authenticated user to see cost records to objects to which he has no authorization in PS reporting, lead…

Published Nov 10, 2020 · Updated Aug 4, 2024 · Assigned by sap

Vendor: SAP Product: SAP ERP Product: SAP S/4 HANA

Description

SAP ERP and SAP S/4 HANA allows an authenticated user to see cost records to objects to which he has no authorization in PS reporting, leading to Missing Authorization check.

Affected products

VendorProductAffectedFixed
SAP SE SAP ERP < 600, < 602, < 603, < 604, < 605, < 606, < 616, < 617, < 618 —
SAP SE SAP S/4 HANA < 100, < 101, < 102, < 103, < 104 —

References