QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2023-32112

Back to search

CVE-2023-32112

Published: May 9, 2023

Modified: Jan 28, 2025

PUBLISHED

CVSS v3.1

2.8

LOW

Description

Vendor Master Hierarchy - versions SAP_APPL 500, SAP_APPL 600, SAP_APPL 602, SAP_APPL 603, SAP_APPL 604, SAP_APPL 605, SAP_APPL 606, SAP_APPL 616, SAP_APPL 617, SAP_APPL 618, S4CORE 100, does not perform necessary authorization checks for an authenticated user to access some of its function. This could lead to modification of data impacting the integrity of the system.

VendorProductVersions

SAP_SE

Vendor Master Hierarchy

affected
SAP_APPL 500
affected
SAP_APPL 600
affected
SAP_APPL 602
affected
SAP_APPL 603
affected
SAP_APPL 604

+6 more versions

Weaknesses (CWE)

CWE-862

CVSS v3.1 Details

CVSS v3.1 Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

Required

Scope

Unchanged

Confidentiality

None

Integrity

Low

Availability

None

References

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now