CVE-2019-0276

Banking services from SAP 9.0 (FSAPPL version 5) and SAP S/4HANA Financial Products Subledger (S4FPSL, version 1) performs an inadequate authorization check for an authenticated user, potentially resulting in escalation of privileges.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
8.8 HIGH
NETWORK
LOW
LOW
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
sapCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 66%
VendorProductVersion
sapbanking_services_from_sap
9.0
saps\/4hana_financial_products_subledger
1.0
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://www.securityfocus.com/bid/107353
https://launchpad.support.sap.com/#/notes/2754235
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=515408080
http://www.securityfocus.com/bid/107353
https://launchpad.support.sap.com/#/notes/2754235
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=515408080