CVE-2020-6298

CVE-2020-6298 affects SAP Banking Services (Generic Market Data) versions 400, 450, and 500. The root cause is a missing authorization check that lets an unauthorized user display protected Business Partner Generic Market Data (GMD) and alter related GMD key figure values, impacting confidentiali...