CVE-2020-6212

published 2020-04-24

CVE-2020-6212: Egypt localized withholding tax reports Clearing of Liabilities and Remittance Statement and Summary in SAP ERP (versions 618, 730, EAPPLGLO 607) and S/4 HANA…

medium 5.4 CVSS 3.1

AV N AC L PR L UI N S U C L I L A N

Egypt localized withholding tax reports Clearing of Liabilities and Remittance Statement and Summary in SAP ERP (versions 618, 730, EAPPLGLO 607) and S/4 HANA (versions 100, 101, 102, 103, 104) do not perform necessary authorization checks for an authenticated user, allowing reading or modification of some tax reports, due to Missing Authorization Check.

Affected

16 ranges

Vendor	Product	Version range	Fixed in
sap	erp	—	—
sap	erp	—	—
sap	erp	—	—
sap	s_4hana	—	—
sap	s_4hana	—	—
sap	s_4hana	—	—
sap	s_4hana	—	—
sap	s_4hana	—	—
sap_se	sap_erp	< 618	618
sap_se	sap_erp	< 730	730
sap_se	sap_erp	< EAPPLGLO 607	EAPPLGLO 607
sap_se	sap_s_4_hana	< 100	100
sap_se	sap_s_4_hana	< 101	101
sap_se	sap_s_4_hana	< 102	102
sap_se	sap_s_4_hana	< 103	103
sap_se	sap_s_4_hana	< 104	104

CWE-862