Description
Manage Bank Statement ReProcessing Rules does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. By exploiting this vulnerability, an attacker can enable/disable the sharing rule of other users affecting the integrity of the application. Confidentiality and Availability are not affected.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SAP_SE | SAP S/4 HANA (Manage Bank Statement Reprocessing Rules) | SAPSCORE 131, S4CORE 105, S4CORE 106, S4CORE107, S4CORE 108 | — |
Advisories 2
- NCSC-2024-0228 Kwetsbaarheden verholpen in SAP producten NCSC-NL (Netherlands) · May 17, 2024
- WID-SEC-2024-1107 SAP Software: Mehrere Schwachstellen BSI CERT-Bund (WID) · May 13, 2024