Lucene search
HistoryOct 10, 2023 - 2:15 a.m.
CVE-2023-42473
sap
authorization
privilege escalation
application security
cve-2023-42473
CVSS3
5.4
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
EPSS
0.001
Percentile
18.6%
S/4HANA Manage (Withholding Tax Items) - version 106, does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges which has low impact on the confidentiality and integrity of the application.
Affected configurations
Node
saps\/4hanaMatch106
Related
cvelist
cvelist
cnvd
cnvd
SAP S/4HANA Authorization Issues Vulnerability (CNVD-2024-10202)
2023-10-13 00:00:00
prion
prion
Authorization
2023-10-10 02:15:00
cve
cve
CVE-2023-42473
2023-10-10 02:15:10
CVSS3
5.4
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
EPSS
0.001
Percentile
18.6%
Related for NVD:CVE-2023-42473