Description
Existing authority check in Freight Order Management is executed with wrong attribute. Thus, an unauthenticated user can use functions of Freight Order Management Documents to which access should be re-stricted. This may result in an escalation of privileges.
Available fix and Supported packages
- SAPTM | 100 | 100
- SAPTM 100 | SAPK-10001INSAPTM |
Affected component
- TM-BF-AUT
Authorization Check
CVSS
Score: 0
Exploit
Exploit is not available.
For detailed information please contact the mail [email protected]
URL
https://launchpad.support.sap.com/#/notes/1548672
