Skip to content
OpenAdvisories
Medium · 6.3 CVE-2023-35870 EUVD-2023-39863GHSA-jhwx-fm67-385p

Improper Access Control in SAP S/4HANA (Manage Journal Entry Template)

Published Jul 11, 2023 · Updated Oct 29, 2024 · Assigned by sap

Description

When creating a journal entry template in SAP S/4HANA (Manage Journal Entry Template) - versions S4CORE 104, 105, 106, 107, an attacker could intercept the save request and change the template, leading to an impact on confidentiality and integrity of the resource. Furthermore, a standard template could be deleted, hence making the resource temporarily unavailable.

Affected products

VendorProductAffectedFixed
SAP_SE SAP S/4HANA (Manage Journal Entry Template) S4CORE 104, 105, 106, 107 —

Advisories 1

References