Description
SAP Fiori apps for Travel Management in SAP ERP (My Travel Requests) - version 600, allows an authenticated attacker to exploit a certain misconfigured application endpoint to view sensitive data. This endpoint is normally exposed over the network and successful exploitation can lead to exposure of data like travel documents.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SAP | Fiori apps 1.0 for travel management in SAP ERP (My Travel Requests) | 600 | — |
Advisories 2
- WID-SEC-2023-0904 SAP Patchday April 2023 BSI CERT-Bund (WID) · Apr 10, 2023
- WID-SEC-2023-0356 SAP Software: Mehrere Schwachstellen BSI CERT-Bund (WID) · Feb 13, 2023