CVE-2020-6301
First published: Wed Aug 12 2020(Updated: )
SAP ERP (HCM Travel Management), versions - 600, 602, 603, 604, 605, 606, 607, 608, allows an authenticated but unauthorized attacker to read, modify and settle trips, resulting in escalation of privileges, due to Missing Authorization Check.
Credit: cna@sap.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Sap Hcm Travel Management | =600 | |
| Sap Hcm Travel Management | =602 | |
| Sap Hcm Travel Management | =603 | |
| Sap Hcm Travel Management | =604 | |
| Sap Hcm Travel Management | =605 | |
| Sap Hcm Travel Management | =606 | |
| Sap Hcm Travel Management | =607 | |
| Sap Hcm Travel Management | =608 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- collector/nvd-index
- agent/weakness
- agent/references
- agent/severity
- agent/author
- agent/type
- agent/event
- agent/description
- agent/softwarecombine
- agent/first-publish-date
- agent/tags
- agent/last-modified-date
- collector/mitre-cve
- source/MITRE
- vendor/sap
- canonical/sap hcm travel management
- version/sap hcm travel management/600
- version/sap hcm travel management/602
- version/sap hcm travel management/603
- version/sap hcm travel management/604
- version/sap hcm travel management/605
- version/sap hcm travel management/606
- version/sap hcm travel management/607
- version/sap hcm travel management/608