CVE-2020-6188

Name of the Vulnerable Software and Affected Versions SAP APPL versions 600 through 606, 616 SAP FIN versions 617 through 618, 700, 720, 730 SAP S/4 HANA versions 100 through 104

Description The issue is related to Missing Authorization Check in VAT Pro-Rata reports. This occurs because the reports do not perform necessary authorization checks for an authenticated user.

Recommendations For SAP APPL versions 600 through 606, 616, update to a version that includes the necessary authorization checks. For SAP FIN versions 617 through 618, 700, 720, 730, update to a version that includes the necessary authorization checks. For SAP S/4 HANA versions 100 through 104, update to a version that includes the necessary authorization checks.