CVE-2019-0386
First published: Wed Nov 13 2019(Updated: )
Order processing in SAP ERP Sales (corrected in SAP_APPL 6.0, 6.02, 6.03, 6.04, 6.05, 6.06, 6.16, 6.17, 6.18) and S4HANA Sales (corrected in S4CORE 1.0, 1.01, 1.02, 1.03, 1.04) does not execute the required authorization checks for an authenticated user, which can result in an escalation of privileges.
Credit: cna@sap.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| SAP ERP Sales | =6.0 | |
| SAP ERP Sales | =6.02 | |
| SAP ERP Sales | =6.03 | |
| SAP ERP Sales | =6.04 | |
| SAP ERP Sales | =6.05 | |
| SAP ERP Sales | =6.06 | |
| SAP ERP Sales | =6.16 | |
| SAP ERP Sales | =6.17 | |
| SAP ERP Sales | =6.18 | |
| Sap S4hana Sales | =1.0 | |
| Sap S4hana Sales | =1.01 | |
| Sap S4hana Sales | =1.02 | |
| Sap S4hana Sales | =1.03 | |
| Sap S4hana Sales | =1.04 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- collector/nvd-index
- agent/references
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/author
- agent/weakness
- agent/severity
- agent/last-modified-date
- agent/first-publish-date
- agent/tags
- agent/type
- agent/description
- agent/event
- vendor/sap
- canonical/sap erp sales
- version/sap erp sales/6.0
- version/sap erp sales/6.02
- version/sap erp sales/6.03
- version/sap erp sales/6.04
- version/sap erp sales/6.05
- version/sap erp sales/6.06
- version/sap erp sales/6.16
- version/sap erp sales/6.17
- version/sap erp sales/6.18
- canonical/sap s4hana sales
- version/sap s4hana sales/1.0
- version/sap s4hana sales/1.01
- version/sap s4hana sales/1.02
- version/sap s4hana sales/1.03
- version/sap s4hana sales/1.04