CVE-2023-40625CWE-862

Missing Authorization check in SAP Manage Purchase Contracts App

Medium · published September 12, 2023

CVSS v3.1
5.4
EPSS
0%
Percentile
29.4
In the wild
Unconfirmed
What it is

S4CORE (Manage Purchase Contracts App) - versions 102, 103, 104, 105, 106, 107, does not perform necessary authorization checks for an authenticated user. This could allow an attacker to perform unintended actions resulting in escalation of privileges which has low impact on confidentiality and integrity with no impact on availibility of the system.

The record
Technical detail
CVSS v3.1
5.4 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00367 · 29.4th percentile
Weakness
CWE-862 · Missing Authorization
Published
2023-09-12T02:00Z
EPSS history
Timeline
  • 12 SEP 02:00Z
    Missing Authorization check in SAP Manage Purchase Contracts App
    cvelistv5