Description (CNA)
VAT Pro-Rata reports in SAP ERP (SAP_APPL versions 600, 602, 603, 604, 605, 606, 616 and SAP_FIN versions 617, 618, 700, 720, 730) and SAP S/4 HANA (versions 100, 101, 102, 103, 104) do not perform necessary authorization checks for an authenticated user leading to Missing Authorization Check.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| SAP SE / SAP ERP (SAP_APPL) | affected = 6.0; affected = 6.02; affected = 6.03; affected = 6.04; affected = 6.05; affected = 6.06; affected = 6.16 |
| SAP SE / SAP ERP (SAP_FIN) | affected = 6.17; affected = 6.18; affected = 7.0; affected = 7.20; affected = 7.30 |
| SAP SE / SAP S/4 HANA (S4CORE) | affected = 1.0; affected = 1.01; affected = 1.02; affected = 1.03; affected = 1.04 |
CWE
No CWE identifiers supplied.
References
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=537788812
- https://launchpad.support.sap.com/#/notes/2857511
ADP enrichment
No English description supplied.