high8.8
CVE-2018-2461
Missing authorization check in SAP HCM Fiori "People Profile" (GBX01 HR version 6.0) for an authenticated user which may result in an escalation of privileges.
Impact
Missing authorization check in SAP HCM Fiori "People Profile" (GBX01 HR version 6.0) for an authenticated user which may result in an escalation of privileges.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sap | People Profile | Version 6.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/105327
- https://launchpad.support.sap.com/#/notes/2673959
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=499356993
- http://www.securityfocus.com/bid/105327
- https://launchpad.support.sap.com/#/notes/2673959
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=499356993