Description (CNA)
Automated Note Search Tool (update provided in SAP Basis 7.0, 7.01, 7.02, 7.31, 7.4, 7.5, 7.51, 7.52, 7.53 and 7.54) does not perform sufficient authorization checks leading to the reading of sensitive information.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| SAP SE / Automated Note Search Tool (SAP Basis) | affected < 7.0; affected < 7.01; affected < 7.02; affected < 7.31; affected < 7.4; affected < 7.5; affected < 7.51; affected < 7.52; affected < 7.53; affected < 7.54 |
CWE
No CWE identifiers supplied.
References
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=533671771
- https://launchpad.support.sap.com/#/notes/2863397
ADP enrichment
No English description supplied.