Description
SAP Payment Engine version 500, does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SAP SE | SAP Payment Engine | < 500 | — |
Medium · 6.8
CVE-2021-21487
EUVD-2021-8760GHSA-qqrr-hr4w-72g2
SAP Payment Engine version 500, does not perform necessary authorization checks for an authenticated user, resulting in escalation of privi…
Published Mar 9, 2021 · Updated Aug 3, 2024 · Assigned by sap