| Assigner | sap |
| Reserved | 2024-04-24 |
| Published | 2024-05-14 |
| Updated | 2024-06-04 |
Description
Manage Bank Statement ReProcessing Rules does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. By exploiting this vulnerability, an attacker can enable/disable the sharing rule of other users affecting the integrity of the application. Confidentiality and Availability are not affected.
| CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N |
Problem types
CWE-862: Missing Authorization
Product status
SAPSCORE 131
S4CORE 105
S4CORE 106
S4CORE107
S4CORE 108
References
https://me.sap.com/notes/3434666
https://support.sap.com/en/my-support/knowledge-base/security-notes-news.html
