Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-7m6h-c8wf-3h87

Опубликовано: 10 июн. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 4.3

Описание

SAP S/4HANA (Bank Account Application) does not perform necessary authorization checks. This allows an authenticated 'approver' user to delete attachment from bank account application of other user, leading to a low impact on integrity, with no impact on the confidentiality of the data or the availability of the application.

SAP S/4HANA (Bank Account Application) does not perform necessary authorization checks. This allows an authenticated 'approver' user to delete attachment from bank account application of other user, leading to a low impact on integrity, with no impact on the confidentiality of the data or the availability of the application.

EPSS

Процентиль: 11%
0.00036
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-862

Связанные уязвимости

CVSS3: 4.3
nvd
8 месяцев назад

SAP S/4HANA (Bank Account Application) does not perform necessary authorization checks. This allows an authenticated 'approver' user to delete attachment from bank account application of other user, leading to a low impact on integrity, with no impact on the confidentiality of the data or the availability of the application.

CVSS3: 4.3
fstec
8 месяцев назад

Уязвимость компонента Bank Account Application программной платформы SAP S/4HANA, позволяющая нарушителю оказать воздействие на целостность защищаемой информации

EPSS

Процентиль: 11%
0.00036
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-862