Authorization

2020-06-1013:15:00

PRIOn knowledge base

www.prio-n.com

7.9 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

28.6%

JSON

Statutory Reporting for Insurance Companies in SAP ERP (EA-FINSERV versions - 600, 603, 604, 605, 606, 616, 617, 618, 800 and S4CORE versions 101, 102, 103, 104) does not execute the required authorization checks for an authenticated user, allowing an attacker to view and tamper with certain restricted data leading to Missing Authorization Check.

CPENameOperatorVersion
erp_\\(ea-finserv\\)eq600
erp_\\(ea-finserv\\)eq603
erp_\\(ea-finserv\\)eq604
erp_\\(ea-finserv\\)eq605
erp_\\(ea-finserv\\)eq606
erp_\\(ea-finserv\\)eq616
erp_\\(ea-finserv\\)eq617
erp_\\(ea-finserv\\)eq618
erp_\\(ea-finserv\\)eq800
erp_\\(s4core\\)eq102

Name	Operator	Version
erp_\\(ea-finserv\\)	eq	600
erp_\\(ea-finserv\\)	eq	603
erp_\\(ea-finserv\\)	eq	604
erp_\\(ea-finserv\\)	eq	605
erp_\\(ea-finserv\\)	eq	606
erp_\\(ea-finserv\\)	eq	616
erp_\\(ea-finserv\\)	eq	617
erp_\\(ea-finserv\\)	eq	618
erp_\\(ea-finserv\\)	eq	800
erp_\\(s4core\\)	eq	102