CVE-2020-6316 MEDIUM

CVE-2020-6316

Vendor Sap Se
Product SAP ERP
Published November 10, 2020
Last update August 4, 2024
View on NVD All CVEs

CVSS base score

4.3/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality Low
Integrity None

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

What the vulnerability does

01Description

SAP ERP and SAP S/4 HANA allows an authenticated user to see cost records to objects to which he has no authorization in PS reporting, leading to Missing Authorization check.

Key dates

02Disclosure timeline

November 10, 2020 CVE published
August 4, 2024 Record updated