Description (CNA)
Due to improper authorization check, business users who are using Israeli File from SHAAM program (/ATL/VQ23 transaction), are granted more than needed authorization to perform certain transaction, which may lead to users getting access to data that would otherwise be restricted.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| SAP SE / SAP ERP, localization for CEE countries. | affected C-CEE 110_600; affected 110_602; affected 110_603; affected 110_604; affected 110_700 |
| SAP SE / SAP Financials | affected SAP_FIN 618; affected 720 |
| SAP SE / SAP S/4Hana Core | affected S4CORE 100; affected 101; affected 102; affected 103; affected 104; affected 105; affected 106; affected 107; affected 108 |
CWE
CWE-863
References
- https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html
- https://launchpad.support.sap.com/#/notes/3203065
ADP enrichment
No English description supplied.