CVE-2018-2436

CVE-2018-2436 affects SAP R/3 Enterprise Retail (EHP6): an authenticated user can escalate privileges due to missing authorization checks on transaction WRCK. Impact described as privilege escalation with high CVSS3 score (8.8) and notable network exposure. Documented references point to SAP Note...

CVE-2018-2436: Missing Authorization

Executing transaction WRCK in SAP R/3 Enterprise Retail EHP6 does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges...

PT-2018-15560

Name of the Vulnerable Software and Affected Versions SAP R/3 Enterprise Retail EHP6 version not specified Description The issue arises from the execution of transaction WRCK in SAP R/3 Enterprise Retail EHP6, where necessary authorization checks for an authenticated user are not performed, leadi...