Description

Available fix and Supported packages

• SAP_APPL | 600 | 600
• SAP_APPL | 602 | 602
• SAP_APPL | 603 | 603
• SAP_APPL | 604 | 604
• SAP_APPL | 605 | 605
• SAP_APPL 605 | SAPKH60502 |
• SAP_APPL 600 | SAPKH60019 |
• SAP_APPL 602 | SAPKH60209 |
• SAP_APPL 603 | SAPKH60308 |
• SAP_APPL 604 | SAPKH60409 |

Affected component

CRM-BTX-BF-IF
R/3 Interface for Business Transactions

CVSS

Score: 0

PoC

Detailed vulnerability information added to RedRays Security Platform. Contact [email protected] for details.

URL

https://launchpad.support.sap.com/#/notes/1498940

TAGS

#An-authenticated-user-can-use-functionality-of-CRM_ODE_GET_VBELN-to-which-access-should-be-restricted.-This-can-potentially-result-in-an-Escalation-of-Privileges.