CVEvulnerability

CVE-2023-32112

5.5 MEDIUM Published 2023-05-09 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-05-09
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
2.8 LOW — CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
CVSS 3.1 ([email protected])
5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Weaknesses
CWE-862

Description

Vendor Master Hierarchy - versions SAP_APPL 500, SAP_APPL 600, SAP_APPL 602, SAP_APPL 603, SAP_APPL 604, SAP_APPL 605, SAP_APPL 606, SAP_APPL 616, SAP_APPL 617, SAP_APPL 618, S4CORE 100, does not perform necessary authorization checks for an authenticated user to access some of its function. This could lead to modification of data impacting the integrity of the system.

Affected configurations

• sap s4core 100 • sap vendor master hierarchy sap appl 500 • sap vendor master hierarchy sap appl 600 • sap vendor master hierarchy sap appl 602 • sap vendor master hierarchy sap appl 603 • sap vendor master hierarchy sap appl 604 • sap vendor master hierarchy sap appl 605 • sap vendor master hierarchy sap appl 606 • sap vendor master hierarchy sap appl 616 • sap vendor master hierarchy sap appl 617 • sap vendor master hierarchy sap appl 618

Related

Weakness · CWE (1)

  • CWE-862 Missing Authorization weakness

References