Description (CNA)
SAP ERP (HCM Travel Management), versions - 600, 602, 603, 604, 605, 606, 607, 608, allows an authenticated but unauthorized attacker to read, modify and settle trips, resulting in escalation of privileges, due to Missing Authorization Check.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| SAP SE / SAP ERP (HCM Travel Management) | affected < 600; affected < 602; affected < 603; affected < 604; affected < 605; affected < 606; affected < 607; affected < 608 |
CWE
No CWE identifiers supplied.
References
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=552603345
- https://launchpad.support.sap.com/#/notes/2949196
ADP enrichment
No English description supplied.