CVE-2020-6209

SAP Disclosure Management, version 10.1, does not perform necessary authorization checks for an authenticated user, allowing access to administration accounts by a user with no roles, leading to Missing Authorization Check...

Authorization

SAP Disclosure Management, version 10.1, does not perform necessary authorization checks for an authenticated user, allowing access to administration accounts by a user with no roles, leading to Missing Authorization Check...

PT-2020-19008

Name of the Vulnerable Software and Affected Versions SAP Disclosure Management version 10.1 Description The issue concerns a missing authorization check, allowing an authenticated user without roles to access administration accounts. Recommendations For SAP Disclosure Management version 10.1,...

CVE-2020-6209: Missing Authorization

SAP Disclosure Management, version 10.1, does not perform necessary authorization checks for an authenticated user, allowing access to administration accounts by a user with no roles, leading to Missing Authorization Check...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in administration/administrators.php in Link Up Gold 5.0 allows remote attackers to hijack the authentication of administrators for requests that create administrative accounts...