Description
Missing authority check allows the user of the program to access (Insert, Update, Modify, Delete) any tables and also on any fields of those tables.
This security note has been updated. For more detailed information, see Security Note 1956812.
Available fix and Supported packages
- SCM | 500 | 500
- SCM | 510 | 510
- SCM | 700 | 700
- SCM 700 | SAPKY70006 |
- SCM 510 | SAPKY51021 |
- SCM 500 | SAPKY50025 |
Affected component
- SCM-APO-ATP
Global Available-to-Promise
CVSS
Score: 0
PoC
Detailed vulnerability information added to RedRays Security Platform. Contact [email protected] for details.
URL
https://launchpad.support.sap.com/#/notes/1425123
