Authorization

2020-08-1214:15:00

PRIOn knowledge base

www.prio-n.com

8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

28.6%

JSON

SAP ERP (HCM Travel Management), versions - 600, 602, 603, 604, 605, 606, 607, 608, allows an authenticated but unauthorized attacker to read, modify and settle trips, resulting in escalation of privileges, due to Missing Authorization Check.

CPENameOperatorVersion
hcm_travel_managementeq602
hcm_travel_managementeq603
hcm_travel_managementeq604
hcm_travel_managementeq605
hcm_travel_managementeq606
hcm_travel_managementeq607
hcm_travel_managementeq608
hcm_travel_managementeq600

Name	Operator	Version
hcm_travel_management	eq	602
hcm_travel_management	eq	603
hcm_travel_management	eq	604
hcm_travel_management	eq	605
hcm_travel_management	eq	606
hcm_travel_management	eq	607
hcm_travel_management	eq	608
hcm_travel_management	eq	600