Description (CNA)
Due to a missing authorization check in SAP ERP and SAP S/4HANA (Private Cloud and On-Premise), an authenticated attacker could execute a particular ABAP report to overwrite any existing eight?character executable ABAP report without authorization. If the overwritten report is subsequently executed, the intended functionality could become unavailable. Successful exploitation impacts availability, with a limited impact on integrity confined to the affected report, while confidentiality remains unaffected.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| SAP_SE / SAP ERP and SAP S/4 HANA (Private Cloud and On-Premise) | affected SAP_FIN 618; affected 720; affected 730; affected EA-FIN 617; affected 700; affected SAPSCORE 135; affected S4CORE 102; affected 103; affected 104; affected 105; affected 106; affected 107; affected 108; affected 109; affected EA-APPL 600; affected 602; affected 603; affected 604; affected 605; affected 606 |
CWE
CWE-862
References
ADP enrichment
No English description supplied.
No references supplied.