CVE-2022-31589

CVE-2022-31589

Vendor Sap Se
Product SAP ERP, localization for CEE countries.
Weakness CWE-863 · Incorrect authorization
Published June 14, 2022
Last update August 3, 2024

CVSS base score

What the vulnerability does

01Description

Due to improper authorization check, business users who are using Israeli File from SHAAM program (/ATL/VQ23 transaction), are granted more than needed authorization to perform certain transaction, which may lead to users getting access to data that would otherwise be restricted.

Key dates

02Disclosure timeline

June 14, 2022 CVE published
August 3, 2024 Record updated