Skip to content
OpenAdvisories
Medium · 6.5 CVE-2024-34691 EUVD-2024-34990GHSA-j445-5264-j568

Missing Authorization check in SAP S/4HANA (Manage Incoming Payment Files)

Published Jun 11, 2024 · Updated Aug 2, 2024 · Assigned by sap

Description

Manage Incoming Payment Files (F1680) of SAP
S/4HANA does not perform necessary authorization checks for an authenticated
user, resulting in escalation of privileges. As a result, it has high impact on
integrity and no impact on the confidentiality and availability of the system.

Affected products

VendorProductAffectedFixed
SAP_SE SAP S/4HANA (Manage Incoming Payment Files) S4CORE 102, 103, 104, 105, 106, 107, 108 —

Advisories 2

References