CVE-2020-6212
First published: Fri Apr 24 2020(Updated: )
Egypt localized withholding tax reports Clearing of Liabilities and Remittance Statement and Summary in SAP ERP (versions 618, 730, EAPPLGLO 607) and S/4 HANA (versions 100, 101, 102, 103, 104) do not perform necessary authorization checks for an authenticated user, allowing reading or modification of some tax reports, due to Missing Authorization Check.
Credit: cna@sap.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| SAP ERP central component | =607 | |
| SAP ERP central component | =618 | |
| SAP ERP central component | =730 | |
| SAP S/4HANA | =100 | |
| SAP S/4HANA | =101 | |
| SAP S/4HANA | =102 | |
| SAP S/4HANA | =103 | |
| SAP S/4HANA | =104 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2020-6212?
CVE-2020-6212 has a severe impact as it allows authenticated users to read or modify sensitive withholding tax reports without proper authorization.
How do I fix CVE-2020-6212?
To fix CVE-2020-6212, ensure that you apply the necessary patches provided by SAP in their security notes.
What versions of SAP are affected by CVE-2020-6212?
CVE-2020-6212 affects SAP ERP versions 607, 618, 730, and SAP S/4 HANA versions 100 to 104.
What is the impact of exploiting CVE-2020-6212?
Exploitation of CVE-2020-6212 could lead to unauthorized access and modification of localized tax reports.
Is there any workaround for CVE-2020-6212?
Currently, the best approach to mitigate the risks of CVE-2020-6212 is to apply the latest patches from SAP as no effective workaround is publicly available.
- agent/references
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/author
- agent/last-modified-date
- agent/severity
- agent/first-publish-date
- agent/description
- agent/event
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/sap
- canonical/sap erp central component
- version/sap erp central component/607
- version/sap erp central component/618
- version/sap erp central component/730
- canonical/sap s/4hana
- version/sap s/4hana/100
- version/sap s/4hana/101
- version/sap s/4hana/102
- version/sap s/4hana/103
- version/sap s/4hana/104