Описание
Due to missing authorization checks in the SAP S/4HANA frontend OData Service (Manage Reference Structures), an attacker could update and delete child entities via exposed OData services without proper authorization. This vulnerability has a high impact on integrity, while confidentiality and availability are not impacted.
Ссылки
- Permissions Required
- Permissions Required
Уязвимые конфигурации
Одновременно
EPSS
6.5 Medium
CVSS3
Дефекты
Связанные уязвимости
Due to missing authorization checks in the SAP S/4HANA frontend OData Service (Manage Reference Structures), an attacker could update and delete child entities via exposed OData services without proper authorization. This vulnerability has a high impact on integrity, while confidentiality and availability are not impacted.
Уязвимость программной платформы SAP S/4HANA, связанная с отсутствием авторизации, позволяющая нарушителю нарушить целостность защищаемой информации
EPSS
6.5 Medium
CVSS3