CVE-2020-6212
5.4
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
Summary
Egypt localized withholding tax reports Clearing of Liabilities and Remittance Statement and Summary in SAP ERP (versions 618, 730, EAPPLGLO 607) and S/4 HANA (versions 100, 101, 102, 103, 104) do not perform necessary authorization checks for an authenticated user, allowing reading or modification of some tax reports, due to Missing Authorization Check.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| SAP SE | SAP ERP | < 618 | affected |
| SAP SE | SAP ERP | < 730 | affected |
| SAP SE | SAP ERP | < EAPPLGLO 607 | affected |
| SAP SE | SAP S/4 HANA | < 100 | affected |
| SAP SE | SAP S/4 HANA | < 101 | affected |
| SAP SE | SAP S/4 HANA | < 102 | affected |
| SAP SE | SAP S/4 HANA | < 103 | affected |
| SAP SE | SAP S/4 HANA | < 104 | affected |
Weaknesses
- Missing Authorization Check
ADP Enrichment
CVE Program Container
Additional References
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=544214202
- https://launchpad.support.sap.com/#/notes/2864966
References
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=544214202
- https://launchpad.support.sap.com/#/notes/2864966
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.