Description (CNA)
SAP NetWeaver AS ABAP (Banking Services), versions - 710, 711, 740, 750, 751, 752, 75A, 75B, 75C, 75D, 75E, does not perform necessary authorization checks for an authenticated user due to Missing Authorization Check, allowing wrong and unexpected change of individual conditions by a malicious user leading to wrong prices.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| SAP SE / SAP NetWeaver AS ABAP (Banking Services) | affected < 710; affected < 711; affected < 740; affected < 750; affected < 751; affected < 752; affected < 75A; affected < 75B; affected < 75C; affected < 75D; affected < 75E |
CWE
No CWE identifiers supplied.
References
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=547426775
- https://launchpad.support.sap.com/#/notes/2916562
ADP enrichment
No English description supplied.