Skip links
Arpine Maghakyan

Arpine Maghakyan

Security Researcher of RedRays.

Authority check missing, SAP security note 1310174

Description

In the list of locked appraisal documents or locked offline appraisal documents the administrator is able to see the lock entries of documents for which he/she has no authorization.

Available fix and Supported packages

  • SAP_ABA | 700 | 702
  • SAP_ABA | 710 | 720
  • SAP_ABA 701 | SAPKA70105 |
  • SAP_ABA 700 | SAPKA70020 |
  • SAP_ABA 710 | SAPKA71009 |
  • SAP_ABA 702 | SAPKA70202 |
  • SAP_ABA 711 | SAPKA71104 |

Affected component

    PA-PD-PM
    Objective Setting and Appraisals

CVSS

Score: 0

Exploit

Detailed vulnerability information added to RedRays Security Platform. Contact [email protected] for details.

URL

https://launchpad.support.sap.com/#/notes/1310174

TAGS

#phap_admin
#phap_admin_pa
#lock
#authorization-profile

More to explorer

SAP Cloud Connector Certificate Validation Issue

Date of Release: February 13, 2024 Advisory ID: CVE-2024-25642 Affected Software: SAP Cloud Connector Versions Affected: 2.15.0 to 2.16.1 Vulnerability Summary:A critical vulnerability,