Design/Logic Flaw

2023-08-0801:15:00

PRIOn knowledge base

www.prio-n.com

sap

srm

versions

logic flaw

unauthorized access

information discovery

business partners

nvd

5.4 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.0%

JSON

SAP Supplier Relationship Management -versions 600, 602, 603, 604, 605, 606, 616, 617, allows an unauthorized attacker to discover information relating to SRM within Vendor Master Data for Business Partners replication functionality.This information could be used to allow the attacker to specialize their attacks against SRM.

CPENameOperatorVersion
supplier_relationship_managementeq600
supplier_relationship_managementeq602
supplier_relationship_managementeq603
supplier_relationship_managementeq604
supplier_relationship_managementeq605
supplier_relationship_managementeq606
supplier_relationship_managementeq616
supplier_relationship_managementeq617

Name	Operator	Version
supplier_relationship_management	eq	600
supplier_relationship_management	eq	602
supplier_relationship_management	eq	603
supplier_relationship_management	eq	604
supplier_relationship_management	eq	605
supplier_relationship_management	eq	606
supplier_relationship_management	eq	616
supplier_relationship_management	eq	617