CVE-2020-6188: High severity SAP ERP vulnerability
VAT Pro-Rata reports in SAP ERP (SAPAPPL versions 600, 602, 603, 604, 605, 606, 616 and SAPFIN versions 617, 618, 700, 720, 730) and SAP S/4 HANA (versions 100, 101, 102, 103, 104) do not perform necessary authorization checks for an authenticated user leading to Missing Authorization Check.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2020-6188?
CVE-2020-6188 is classified as a medium severity vulnerability due to the lack of proper authorization checks.
How do I fix CVE-2020-6188?
To fix CVE-2020-6188, apply the relevant SAP ERP or SAP S/4 HANA patches that address the missing authorization checks.
What are the affected versions in CVE-2020-6188?
CVE-2020-6188 affects SAP ERP versions 600 to 606 and SAP S/4 HANA versions 100 to 1909.
What is the impact of CVE-2020-6188?
The impact of CVE-2020-6188 is the potential for authenticated users to access data without appropriate authorization.
Are there any workarounds for CVE-2020-6188?
Currently, there are no documented workarounds for CVE-2020-6188 other than applying the appropriate patches.