Description
Using the program SAPRGEN_CD, various includes are generated in FS-CD depending on Customizing. However, the relevant authorization checks for the generation are missing. As a result, users with insufficient authorizations can perform the generation process as well.
Available fix and Supported packages
- INSURANCE | 464 | 464
- INSURANCE | 471 | 471
- INSURANCE | 472 | 472
- INSURANCE | 600 | 600
- INSURANCE | 602 | 602
- INSURANCE | 603 | 603
- INSURANCE | 604 | 604
- INSURANCE 464 | SAPKIPIL31 |
- INSURANCE 471 | SAPKIPIM24 |
- INSURANCE 472 | SAPKIPIN18 |
- INSURANCE 600 | SAPK-60017ININSURANC |
- INSURANCE 602 | SAPK-60207ININSURANC |
- INSURANCE 603 | SAPK-60306ININSURANC |
- INSURANCE 604 | SAPK-60405ININSURANC |
Affected component
- FS-CD
Collections and Disbursements
CVSS
Score: 0
PoC
Detailed vulnerability information added to RedRays Security Platform. Contact [email protected] for details.
URL
https://launchpad.support.sap.com/#/notes/1363371
