Description
An authenticated user can use functions of WEC-APP-* to which access should be restricted. This may result in an escalation of privileges.
Available fix and Supported packages
- BBPCRM | 701 | 701
- BBPCRM | 702 | 702
- BBPCRM | 712 | 712
- BBPCRM | 713 | 713
- BBPCRM | 714 | 714
- BBPCRM 701 | SAPKU70115 |
- BBPCRM 712 | SAPKU71210 |
- BBPCRM 702 | SAPKU70217 |
- BBPCRM 714 | SAPK-71402INBBPCRM |
- BBPCRM 713 | SAPKU71312 |
Affected component
- WEC-APP-SRV
Web Channel Service
CVSS
Score: 0
PoC
Detailed vulnerability information added to RedRays Security Platform. Contact [email protected] for details.
URL
https://launchpad.support.sap.com/#/notes/2241871
