Lucene search

K
cvelistSapCVELIST:CVE-2023-32112
HistoryMay 09, 2023 - 1:42 a.m.

CVE-2023-32112 Missing Authorization Check in Vendor Master Hierarchy

2023-05-0901:42:23
CWE-862
sap
www.cve.org
5
cve-2023-32112
missing authorization check
vendor master hierarchy
sap_appl 500
sap_appl 600
sap_appl 602
sap_appl 603
sap_appl 604
sap_appl 605
sap_appl 606
sap_appl 616
sap_appl 617
sap_appl 618
s4core 100
data integrity impact

CVSS3

2.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N

AI Score

5.7

Confidence

High

EPSS

0

Percentile

9.0%

Vendor Master Hierarchy - versions SAP_APPL 500, SAP_APPL 600, SAP_APPL 602, SAP_APPL 603, SAP_APPL 604, SAP_APPL 605, SAP_APPL 606, SAP_APPL 616, SAP_APPL 617, SAP_APPL 618, S4CORE 100, does not perform necessary authorization checks for an authenticated user toΒ access some of its function. This could lead to modification of data impacting the integrity of the system.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Vendor Master Hierarchy",
    "vendor": "SAP_SE",
    "versions": [
      {
        "status": "affected",
        "version": "SAP_APPL 500"
      },
      {
        "status": "affected",
        "version": "SAP_APPL 600"
      },
      {
        "status": "affected",
        "version": "SAP_APPL 602"
      },
      {
        "status": "affected",
        "version": "SAP_APPL 603"
      },
      {
        "status": "affected",
        "version": "SAP_APPL 604"
      },
      {
        "status": "affected",
        "version": "SAP_APPL 605"
      },
      {
        "status": "affected",
        "version": "SAP_APPL 606"
      },
      {
        "status": "affected",
        "version": "SAP_APPL 616"
      },
      {
        "status": "affected",
        "version": "SAP_APPL 617"
      },
      {
        "status": "affected",
        "version": "SAP_APPL 618"
      },
      {
        "status": "affected",
        "version": "S4CORE 100"
      }
    ]
  }
]

CVSS3

2.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N

AI Score

5.7

Confidence

High

EPSS

0

Percentile

9.0%

Related for CVELIST:CVE-2023-32112