CWE Code: 285
Vulnerability Type: privilege_escalation
CVSS Score: 6.5
CWE Name:  Improper Authorization
Summary: banking services from sap 9.0 (fsappl version 5) and sap s/4hana financial products subledger (s4fpsl, version 1) performs an inadequate authorization check for an authenticated user, potentially resulting in escalation of privileges.
Access Authentication: SINGLE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): PARTIAL/PARTIAL/PARTIAL
Published Date: 2019-03-12
Last Modified Date: 2019-03-14