CVE-2019-0276

EUVD-2019-1049
Banking services from SAP 9.0 (FSAPPL version 5) and SAP S/4HANA Financial Products Subledger (S4FPSL, version 1) performs an inadequate authorization check for an authenticated user, potentially resulting in escalation of privileges.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
8.8 HIGH
NETWORK
LOW
LOW
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 65%
Affected Products (NVD)
VendorProductVersion
sapbanking_services_from_sap
9.0
saps\/4hana_financial_products_subledger
1.0
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://www.securityfocus.com/bid/107353
https://launchpad.support.sap.com/#/notes/2754235
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=515408080
http://www.securityfocus.com/bid/107353
https://launchpad.support.sap.com/#/notes/2754235
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=515408080