Description
Due to improper authorization check, business users who are using Israeli File from SHAAM program (/ATL/VQ23 transaction), are granted more than needed authorization to perform certain transaction, which may lead to users getting access to data that would otherwise be restricted.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SAP SE | SAP ERP, localization for CEE countries. | C-CEE 110_600, 110_602, 110_603, 110_604, 110_700 | — |
| SAP SE | SAP Financials | SAP_FIN 618, 720 | — |
| SAP SE | SAP S/4Hana Core | S4CORE 100, 101, 102, 103, 104, 105, 106, 107, 108 | — |