Arpine Maghakyan

Arpine Maghakyan

Security Researcher of RedRays.

February 10, 2010
3:40 pm

Missing authority check in Supply Chain Cockpit/Engineer, SAP security note 1423936

Description

Missing authority check in some transactions within Supply Chain Cockpit/Engineer.

Available fix and Supported packages

SCM | 500 | 500
SCM | 510 | 510
SCM | 700 | 700
SCM 500 | SAPKY50017 |
SCM 510 | SAPKY51013 |
SCM 700 | SAPKY70006 |

Affected component

CVSS

Score: 0

Exploit

Exploit is not available.
For detailed information please contact the mail [email protected]

URL

https://launchpad.support.sap.com/#/notes/1423936

TAGS

#Missing-authority-check

More to explorer

Time to give back, RedRays

RedRays Offers Support to Startups Listing on SAP Store

February 26, 2023

RedRays is a startup that was founded in January 2021. Throughout our journey, we have been fortunate to receive support and guidance

Threat Modeling: An Overview of PASTA Methodology

February 23, 2023

I would like to briefly introduce the Threat Modeling methodology in this blog post. This will be the initial part of the

SAP Security Patch Day – February 2023

February 14, 2023

SAP Security Patch Day is a monthly event during which SAP releases security updates for their software products. These updates address potential

3242933 – [CVE-2022-39802] File path traversal vulnerability in SAP Manufacturing Execution

October 12, 2022

General information Risk: CRITICAL Versions Affected:SAP MFG EXECUTION CORE 15.1SAP MFG EXECUTION CORE 15.2SAP MFG EXECUTION CORE 15.3Vendor URL: https://sap.comBug: File path traversal