Banking services from SAP 9.0 (Bank Analyzer), version - 500, and SAP S/4HANA for financial products subledger, version ? 100, does not correctly perform necessary authorization checks for an authenticated user due to Improper Authorization checks, that may cause a system administrator to create incorrect authorization proposals. This may result in privilege escalation and may expose restricted banking data.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
sap s/4hana for financial products subledger 100 |
||
sap bank analyzer 500 |
Vulmon