CVE-2021-21486

SAP Enterprise Financial Services versions, 101, 102, 103, 104, 105, 600, 603, 604, 605, 606, 616, 617, 618, 800, does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges.

Score

CVSS 3.1 8.8 High

Status

Modified - cna@sap.com

Published

2021-03-09

Last modified

2024-08-03

Weaknesses

CWE-862

Affected products

• Enterprise Financial Services (Sap)
• Sap Enterprise Financial Services Bank Customer Accounts (Sap Se)

References

• https://launchpad.support.sap.com/#/notes/3007888
• https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=571343107