CVE-2018-2455

SAP Enterprise Financial Services (versions 6.05, 6.06, 6.16, 6.17, 6.18, 8.0) is affected in the EAFS_BCA_BUSOPR_SEPA function by a lack of authorization checks for an authenticated user, enabling escalation of privileges. This vulnerability is documented as CVE-2018-2455 across multiple sources...