Description (CNA)
SAP Enterprise Financial Services (SAPSCORE 1.11, 1.12; S4CORE 1.01, 1.02; EA-FINSERV 6.04, 6.05, 6.06, 6.16, 6.17, 6.18, 8.0) does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| SAP SE / SAP Enterprise Financial Services (SAPSCORE) | affected 1.11; affected 1.12 |
| SAP SE / SAP Enterprise Financial Services (S4CORE) | affected 1.01; affected 1.02 |
| SAP SE / SAP Enterprise Financial Services (EA-FINSERV) | affected 6.04; affected 6.05; affected 6.06; affected 6.16; affected 6.17; affected 6.18; affected 8.0 |
CWE
No CWE identifiers supplied.
References
- https://blogs.sap.com/2018/05/08/sap-security-patch-day-may-2018/
- http://www.securityfocus.com/bid/104116
- https://launchpad.support.sap.com/#/notes/2596627
ADP enrichment
No English description supplied.