Description
BSP application HCM_LEARNING can be abused by a malicious user, allowing them to modify displayed application content without authorization, and to potentially obtain authentification information from other legitimate users.
Available fix and Supported packages
- LSOFE | 200 | 200
- LSOFE | 300 | 300
- LSOFE | 600 | 600
- LSOFE | 602 | 602
- LSOFE | 603 | 603
- LSOFE | 604 | 604
- LSOFE | 605 | 605
- LSOFE | 606 | 606
- LSOFE | 616 | 616
- LSOFE 300 | SAPK-30024INLSOFE |
- LSOFE 200 | SAPK-200PTINLSOFE |
- LSOFE 606 | SAPK-60603INLSOFE |
- LSOFE 600 | SAPK-60022INLSOFE |
- LSOFE 602 | SAPK-60212INLSOFE |
- LSOFE 603 | SAPK-60311INLSOFE |
- LSOFE 604 | SAPK-60412INLSOFE |
- LSOFE 605 | SAPK-60506INLSOFE |
- LSOFE 616 | 616 |
Affected component
- PE-LSO-LPO
Learning Portal
CVSS
Score: 0
PoC
Detailed vulnerability information added to RedRays Security Platform. Contact [email protected] for details.
URL
https://launchpad.support.sap.com/#/notes/1687668
