Description (CNA)
SAP GRC Access Control - versions V1100_700, V1100_731, V1200_750, does not perform necessary authorization checks for an authenticated user, which could lead to escalation of privileges.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| SAP SE / SAP GRC Access Control | affected < V1100_700; affected < V1100_731; affected < V1200_750 |
CWE
CWE-862
References
- https://wiki.scn.sap.com/wiki/display/PSR/SAP+Security+Patch+Day+-+December+2021
- https://launchpad.support.sap.com/#/notes/3080816
ADP enrichment
No English description supplied.