5.5

CVE-2020-6212

Egypt localized withholding tax reports Clearing of Liabilities and Remittance Statement and Summary in SAP ERP (versions 618, 730, EAPPLGLO 607) and S/4 HANA (versions 100, 101, 102, 103, 104) do not perform necessary authorization checks for an authenticated user, allowing reading or modification of some tax reports, due to Missing Authorization Check.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
SAP ≫ Erp Version 607
SAP ≫ Erp Version 618
SAP ≫ Erp Version 730
SAP ≫ S/4HANA Version 100
SAP ≫ S/4HANA Version 101
SAP ≫ S/4HANA Version 102
SAP ≫ S/4HANA Version 103
SAP ≫ S/4HANA Version 104
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.65% 0.464
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5.4 2.8 2.5
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
NIST 5.5 8 4.9
AV:N/AC:L/Au:S/C:P/I:P/A:N
SAP 5.4 2.8 2.5
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
CWE-862 Missing Authorization

The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=544214202
Vendor Advisory
https://launchpad.support.sap.com/#/notes/2864966
Vendor Advisory
Permissions Required