Unspecified Vulnerability in SAP NetWeaver AS ABAP (CNVD-2021-25380)

SAP Banking Services is a banking services solution from SAP. A security vulnerability exists in Banking Services in SAP NetWeaver AS ABAP, which arises from the program failing to perform sufficient authorization checks. An attacker could exploit the vulnerability to cause a pricing error...

CVE-2020-6270

SAP NetWeaver AS ABAP Banking Services, versions - 710, 711, 740, 750, 751, 752, 75A, 75B, 75C, 75D, 75E, does not perform necessary authorization checks for an authenticated user due to Missing Authorization Check, allowing wrong and unexpected change of individual conditions by a malicious user...

CVE-2020-6268

Statutory Reporting for Insurance Companies in SAP ERP EA-FINSERV versions - 600, 603, 604, 605, 606, 616, 617, 618, 800 and S4CORE versions 101, 102, 103, 104 does not execute the required authorization checks for an authenticated user, allowing an attacker to view and tamper with certain...

CVE-2020-6268

CVE-2020-6268 affects SAP ERP EA-FINSERV versions 600–618, 800 and S4CORE versions 101–104. The issue is a Missing Authorization Check where an authenticated user can view and tamper with certain restricted data due to insufficient authorization validation. The CVE entry provides a high-level imp...

CVE-2020-6268

Statutory Reporting for Insurance Companies in SAP ERP EA-FINSERV versions - 600, 603, 604, 605, 606, 616, 617, 618, 800 and S4CORE versions 101, 102, 103, 104 does not execute the required authorization checks for an authenticated user, allowing an attacker to view and tamper with certain...

postgresql: ALTER ... DEPENDS ON EXTENSION is missing authorization checks

A flaw was found in PostgreSQL's "ALTER ... DEPENDS ON EXTENSION", where sub-commands did not perform authorization checks. An authenticated attacker could use this flaw in certain configurations to perform drop objects such as function, triggers, et al., leading to database corruption...

EulerOS 2.0 SP8 : postgresql (EulerOS-SA-2020-1587)

According to the version of the postgresql packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A flaw was found in PostgreSQL's 'ALTER ... DEPENDS ON EXTENSION', where sub-commands did not perform authorization checks. An authenticated...

Unspecified Vulnerability in SAP Master Data Governance

SAP Master Data Governance is a suite of data management tools from SAP Germany for maintaining, validating, and distributing master data. A security vulnerability exists in SAP Master Data Governance that stems from a lack of authorization checks. An attacker could exploit the vulnerability to...

Unspecified Vulnerability in IBM Business Process Manager and Business Automation Workflow

IBM Business Process Manager BPM and IBM Business Automation Workflow are both products of IBM Corporation, U.S.A. IBM Business Process Manager is a comprehensive business process management platform. The platform provides a series of related tools for business process modeling, assembly,...

CVE-2020-4446

IBM Business Process Manager 8.0, 8.5, and 8.6 and IBM Business Automation Workflow 18.0 and 19.0 could allow a remote attacker to bypass security restrictions, caused by the failure to perform insufficient authorization checks. IBM X-Force ID: 181126...

CVE-2020-4446

CVE-2020-4446 affects IBM Business Process Manager (BPM) versions 8.0, 8.5, and 8.6 and IBM Business Automation Workflow (BAW) versions 18.0 and 19.0. The root cause is insufficient authorization checks, enabling a remote attacker to bypass security restrictions. Public details from the connected...

Security Bulletin: Information disclosure vulnerability affecting IBM Business Automation Workflow and IBM Business Process Manager (BPM) - CVE-2020-4446

Summary IBM Business Process Manager and IBM Business Automation Workflow are vulnerable to an information disclosure attack. Vulnerability Details CVEID: CVE-2020-4446 DESCRIPTION: IBM Business Process Manager and IBM Business Automation Workflow could allow a remote attacker to bypass security...

CVE-2020-6212

Egypt localized withholding tax reports Clearing of Liabilities and Remittance Statement and Summary in SAP ERP versions 618, 730, EAPPLGLO 607 and S/4 HANA versions 100, 101, 102, 103, 104 do not perform necessary authorization checks for an authenticated user, allowing reading or modification o...

CVE-2020-6212

Egypt localized withholding tax reports Clearing of Liabilities and Remittance Statement and Summary in SAP ERP versions 618, 730, EAPPLGLO 607 and S/4 HANA versions 100, 101, 102, 103, 104 do not perform necessary authorization checks for an authenticated user, allowing reading or modification o...

CVE-2020-6212

The CVE-2020-6212 entry affects SAP ERP and SAP S/4HANA. Specifically, it concerns Egypt localization reports: Clearing of Liabilities, Remittance Statement, and Summary for SAP ERP versions 618, 730, EAPPLGLO 607, and SAP S/4 HANA versions 100–104. The root cause is Missing Authorization Check, ...

Unspecified Vulnerability in SAP ERP and S/4 HANA

SAP HANA and SAP ERP HCM are both products of SAP.SAP HANA is a high-performance real-time data analysis platform. The platform provides data query functions to support users to query real-time business data query and analysis.SAP ERP HCM is a set of enterprise human resource management solutions...

Authorization

SAP Commerce, versions 1811, 1905, does not perform necessary authorization checks for an anonymous user, due to Missing Authorization Check. This affects confidentiality of secure media...

FreeBSD : PostgresSQL -- ALTER ... DEPENDS ON EXTENSION is missing authorization checks (d331f691-71f4-11ea-8bb5-6cc21735f730)

The PostgreSQL project reports : Versions Affected: 9.6 - 12 The ALTER ... DEPENDS ON EXTENSION sub-commands do not perform authorization checks, which can allow an unprivileged user to drop any function, procedure, materialized view, index, or trigger under certain conditions. This attack is...

Authorization Bypass

PostgreSQL is vulnerable to authorization bypass. The vulnerability exists as the ALTER ... DEPENDS ON extension is missing authorization checks...

postgresql: ALTER ... DEPENDS ON EXTENSION is missing authorization checks

A flaw was found in PostgreSQL's "ALTER ... DEPENDS ON EXTENSION", where sub-commands did not perform authorization checks. An authenticated attacker could use this flaw in certain configurations to perform drop objects such as function, triggers, et al., leading to database corruption...