CVE-2020-6273
First published: Wed Aug 12 2020(Updated: )
SAP S/4 HANA (Fiori UI for General Ledger Accounting), versions 103, 104, does not perform necessary authorization checks for an authenticated user working with attachment service, allowing the attacker to delete attachments due to Missing Authorization Check.
Credit: cna@sap.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Sap S\/4 Hana Fiori Ui For General Ledger Accounting | =103 | |
| Sap S\/4 Hana Fiori Ui For General Ledger Accounting | =104 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- collector/nvd-index
- agent/references
- agent/severity
- agent/weakness
- agent/author
- agent/tags
- agent/event
- agent/type
- agent/description
- agent/first-publish-date
- agent/last-modified-date
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- vendor/sap
- canonical/sap s\/4 hana fiori ui for general ledger accounting
- version/sap s\/4 hana fiori ui for general ledger accounting/103
- version/sap s\/4 hana fiori ui for general ledger accounting/104