CVE-2023-32112CWE-862

Missing Authorization Check in Vendor Master Hierarchy

Low · published May 9, 2023

CVSS v3.1
2.8
EPSS
0%
Percentile
3.8
In the wild
Unconfirmed
What it is

Vendor Master Hierarchy - versions SAP_APPL 500, SAP_APPL 600, SAP_APPL 602, SAP_APPL 603, SAP_APPL 604, SAP_APPL 605, SAP_APPL 606, SAP_APPL 616, SAP_APPL 617, SAP_APPL 618, S4CORE 100, does not perform necessary authorization checks for an authenticated user to access some of its function. This could lead to modification of data impacting the integrity of the system.

The record
Technical detail
CVSS v3.1
2.8 · LOW
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00149 · 3.8th percentile
Weakness
CWE-862 · Missing Authorization
Published
2023-05-09T01:42Z
EPSS history
Timeline
  • 09 MAY 01:42Z
    Missing Authorization Check in Vendor Master Hierarchy
    cvelistv5