medium6.5
CVE-2022-31589
Due to improper authorization check, business users who are using Israeli File from SHAAM program (/ATL/VQ23 transaction), are granted more than needed authori…
Impact
Due to improper authorization check, business users who are using Israeli File from SHAAM program (/ATL/VQ23 transaction), are granted more than needed authorization to perform certain transaction, which may lead to users getting access to data that would otherwise be restricted.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sap | Erp Financial Accounting | Versions 618, 720 |
| Sap | Erp Localization For Cee Countries | Versions c-cee_110_600, c-cee_110_602, c-cee_110_603, c-cee_110_604, c-cee_110_700 |
| Sap | S\/4hana | Versions 100, 101, 102, 103, 104, 105 |