CVEvulnerability

CVE-2022-31589

6.5 MEDIUM Published 2022-06-14 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2022-06-14
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS 2.0 ([email protected])
4.0 MEDIUM — AV:N/AC:L/Au:S/C:P/I:N/A:N
Weaknesses
CWE-863

Description

Due to improper authorization check, business users who are using Israeli File from SHAAM program (/ATL/VQ23 transaction), are granted more than needed authorization to perform certain transaction, which may lead to users getting access to data that would otherwise be restricted.

Affected configurations

• sap erp financial accounting 618 • sap erp financial accounting 720 • sap erp localization for cee countries c-cee 110 600 • sap erp localization for cee countries c-cee 110 602 • sap erp localization for cee countries c-cee 110 603 • sap erp localization for cee countries c-cee 110 604 • sap erp localization for cee countries c-cee 110 700 • sap s\/4hana 100 • sap s\/4hana 101 • sap s\/4hana 102 • sap s\/4hana 103 • sap s\/4hana 104 • sap s\/4hana 105 • sap s\/4hana 106 • sap s\/4hana 107 • sap s\/4hana 108

Related

Weakness · CWE (1)

  • CWE-863 Incorrect Authorization weakness

References