EUVD-2020-27423

Malware in sbrugna...

CVE-2020-6273

SAP S/4 HANA Fiori UI for General Ledger Accounting, versions 103, 104, does not perform necessary authorization checks for an authenticated user working with attachment service, allowing the attacker to delete attachments due to Missing Authorization Check...

CVE-2020-6273

SAP S/4 HANA Fiori UI for General Ledger Accounting, versions 103, 104, does not perform necessary authorization checks for an authenticated user working with attachment service, allowing the attacker to delete attachments due to Missing Authorization Check...

CVE-2020-6273

CVE-2020-6273 affects SAP S/4 HANA with Fiori UI for General Ledger Accounting (versions 103 and 104). The root cause is a missing authorization check in the attachment service, allowing an authenticated user to delete attachments. Impact is defined as unauthorized modification of data via attach...