CVE-2020-6212

Name of the Vulnerable Software and Affected Versions SAP ERP versions 607 through 730 S/4 HANA versions 100 through 104

Description The issue concerns the Egypt localized withholding tax reports in SAP systems, where the Clearing of Liabilities and Remittance Statement and Summary do not perform necessary authorization checks for an authenticated user. This allows the reading or modification of some tax reports due to a missing authorization check.

Recommendations For SAP ERP versions 607 through 730, update to a version that includes the necessary authorization checks. For S/4 HANA versions 100 through 104, update to a version that includes the necessary authorization checks. As a temporary workaround, consider restricting access to the tax reports until a patch is available.