Description (CNA)
SAP Enable Now Manager does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. On successful exploitation, the attacker with the role 'Learner' could gain access to other user's data in manager which will lead to a high impact to the confidentiality of the application.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| SAP_SE / SAP Enable Now | affected 1704 |
CWE
CWE-862
References
- https://me.sap.com/notes/3441944
- https://support.sap.com/en/my-support/knowledge-base/security-notes-news.html?anchorId=section_370125364
ADP enrichment
No English description supplied.
No references supplied.
No English description supplied.