Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-f866-c6jw-4pqx

Опубликовано: 11 авг. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 4.3

Описание

Reprocess Bank Statement Items in SAP S/4HANA does not perform the necessary authorization checks for authenticated users, allowing them to use rules that have not been shared with them, resulting in privilege escalation.This vulnerability has a low impact on confidentiality, with no impact on integrity and availability of the application

Reprocess Bank Statement Items in SAP S/4HANA does not perform the necessary authorization checks for authenticated users, allowing them to use rules that have not been shared with them, resulting in privilege escalation.This vulnerability has a low impact on confidentiality, with no impact on integrity and availability of the application

EPSS

Процентиль: 19%
0.00281
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-639

Связанные уязвимости

CVSS3: 4.3
nvd
2 месяца назад

Reprocess Bank Statement Items in SAP S/4HANA does not perform the necessary authorization checks for authenticated users, allowing them to use rules that have not been shared with them, resulting in privilege escalation.This vulnerability has a low impact on confidentiality, with no impact on integrity and availability of the application

EPSS

Процентиль: 19%
0.00281
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-639