CWE Code: 285
Vulnerability Type: privilege_escalation
CVSS Score: 6.5
CWE Name:  Improper Authorization
Summary: sap treasury and risk management (ea-finserv 6.0, 6.03, 6.04, 6.05, 6.06, 6.16, 6.17, 6.18 and 8.0; s4core 1.01, 1.02 and 1.03), does not perform necessary authorization checks for authorization objects t_deal_dp and t_deal_pd , resulting in escalation of privileges.
Access Authentication: SINGLE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): PARTIAL/PARTIAL/PARTIAL
Published Date: 2019-05-14
Last Modified Date: 2019-05-16