medium5.4
CVE-2022-31597
Within SAP S/4HANA - versions S4CORE 101, 102, 103, 104, 105, 106, SAPSCORE 127, the application business partner extension for Spain/Slovakia does not perform…
Impact
Within SAP S/4HANA - versions S4CORE 101, 102, 103, 104, 105, 106, SAPSCORE 127, the application business partner extension for Spain/Slovakia does not perform necessary authorization checks for a low privileged authenticated user over the network, resulting in escalation of privileges leading to low impact on confidentiality and integrity of the data.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sap | S\/4hana | Versions 101, 102, 103, 104, 105, 106 |
| Sap | Sapscore | Version 127 |