Skip to content
OpenAdvisories
Medium · 6.8 CVE-2021-21486 EUVD-2021-8759GHSA-6g9h-vg2g-h3mq

SAP Enterprise Financial Services versions, 101, 102, 103, 104, 105, 600, 603, 604, 605, 606, 616, 617, 618, 800, does not perform necessar…

Published Mar 9, 2021 · Updated Aug 3, 2024 · Assigned by sap

Description

SAP Enterprise Financial Services versions, 101, 102, 103, 104, 105, 600, 603, 604, 605, 606, 616, 617, 618, 800, does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges.

Affected products

VendorProductAffectedFixed
SAP SE SAP Enterprise Financial Services (Bank Customer Accounts) < 101, < 102, < 103, < 104, < 105, < 600, < 603, < 604, < 605, < 606, < 616, < 617, < 618, < 800 —

References