CVE-2020-6316

SAP ERP and SAP S/4 HANA allows an authenticated user to see cost records to objects to which he has no authorization in PS reporting, leading to Missing…

Medium · published November 10, 2020

CVSS v3.0
4.3
EPSS
1%
Percentile
56.7
In the wild
Unconfirmed
What it is

SAP ERP and SAP S/4 HANA allows an authenticated user to see cost records to objects to which he has no authorization in PS reporting, leading to Missing Authorization check.

The record
Technical detail
CVSS v3.0
4.3 · MEDIUM
Vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00816 · 56.7th percentile
Published
2020-11-10T16:11Z
EPSS history
Timeline
  • 10 NOV 16:11Z
    SAP ERP and SAP S/4 HANA allows an authenticated user to see cost records to objects to which he has no authorization in PS reporting, leading to Missing…
    cvelistv5