CVEvulnerability
CVE-2013-3061
6.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2013-05-01
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.5 MEDIUM — AV:N/AC:L/Au:S/C:P/I:P/A:P
- Weaknesses
- CWE-264
Description
The ISHMED-PATRED_TRANSACT_RFCCALL function in the IS-H Industry-Specific Component Hospital subsystem in SAP Healthcare Industry Solution, and the SAP ERP central component (aka ECC 6), allows remote authenticated users to bypass intended transaction restrictions via unspecified vectors.
Affected configurations
• sap erp central component
• sap healthcare industry solution
Related
Weakness · not in database (1)
References
- http://archives.neohapsis.com/archives/bugtraq/2013-04/0176.html Broken Link
- http://scn.sap.com/docs/DOC-8218 Broken Link
- http://www.esnc.de/sap-security-audit-and-scan-services/security-advisories/36-privilege-escalation-in-sap-is-healthcare Broken Link
- https://service.sap.com/sap/support/notes/1691744 Permissions Required
- http://archives.neohapsis.com/archives/bugtraq/2013-04/0176.html Broken Link
- http://scn.sap.com/docs/DOC-8218 Broken Link
- http://www.esnc.de/sap-security-audit-and-scan-services/security-advisories/36-privilege-escalation-in-sap-is-healthcare Broken Link
- https://service.sap.com/sap/support/notes/1691744 Permissions Required