← Zuruck zu CVEs

CVE-2023-32112

LOW

2.8

Beschreibung

Vendor Master Hierarchy - versions SAP_APPL 500, SAP_APPL 600, SAP_APPL 602, SAP_APPL 603, SAP_APPL 604, SAP_APPL 605, SAP_APPL 606, SAP_APPL 616, SAP_APPL 617, SAP_APPL 618, S4CORE 100, does not perform necessary authorization checks for an authenticated user to access some of its function. This could lead to modification of data impacting the integrity of the system.

CVE Details

CVSS v3.1 Bewertung2.8

SchweregradLOW

CVSS VektorCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N

AngriffsvektorLOCAL

KomplexitatLOW

Erforderliche PrivilegienLOW

BenutzerinteraktionREQUIRED

Veroffentlicht5/9/2023

Zuletzt geandert11/21/2024

Quellenvd

Honeypot-Sichtungen0

Betroffene Produkte

sap:s4coresap:vendor_master_hierarchy

Schwachen (CWE)

CWE-862

Referenzen

https://launchpad.support.sap.com/#/notes/2335198(cna@sap.com)

https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html(cna@sap.com)

https://launchpad.support.sap.com/#/notes/2335198(af854a3a-2127-422b-91ae-364da2661108)

https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html(af854a3a-2127-422b-91ae-364da2661108)

IOC Korrelationen

Keine Korrelationen erfasst

This product uses data from the NVD API but is not endorsed or certified by the NVD.